Januscape: A 16-Year-Old Linux KVM Escape Bug
CVE-2026-53359 lets a guest VM crash or potentially root your Proxmox host, and it hid in KVM's shared code for 16 years. What to patch and how to check.
Linux kernel releases, drivers and kernel vulnerabilities, from release candidates to privilege-escalation bugs.
CVE-2026-53359 lets a guest VM crash or potentially root your Proxmox host, and it hid in KVM's shared code for 16 years. What to patch and how to check.
CVE-2026-31431 chains AF_ALG, splice(), and authencesn's ESN scratch write into a deterministic 4-byte page cache write that gives an unprivileged local user root. Full technical breakdown, exploit mechanics, detection, mitigation, and patch status per distro.
Back in February 2026, Linus Torvalds rejected the entire MMC subsystem pull request for Linux 7.0, calling it "complete garbage" and "untested crap" because it didn't build properly and bypassed linux-next. Linux 7.1 gets it right.
Linux 7.0 RC6 landed with more fixes than Torvalds wants to see this late in the cycle, and RC5's calm turned out to be a mirage. He's not panicking yet — but he's also not making promises about the release date, and he suspects better AI coding tools might be partly responsible for the noise.