ndouglas-cloudsmith/CVE-2026-53359
GitHub: ndouglas-cloudsmith/CVE-2026-53359
针对 Linux 内核 KVM 中存在的虚拟机逃逸漏洞 CVE-2026-53359（Januscape）提供检测脚本、利用查询及相关修复资源汇总。
Stars: 0 | Forks: 0
# CVE-2026-53359
Linux kernel 中一个存在了 16 年的漏洞允许租用的 VM 逃逸并攻击其运行的宿主机。Intel 和 AMD 均受影响。Januscape 是 **[KVM](https://ubuntu.com/blog/januscape-linux-vulnerability-mitigations-available)** 代码中的一个释放后使用（use-after-free）漏洞，自 2010 年以来就一直存在。
```
wget https://raw.githubusercontent.com/ndouglas-cloudsmith/exploit-check/refs/heads/main/exploit-check.sh
chmod +x exploit-check.sh
./exploit-check.sh update
./exploit-check.sh query CVE-2026-53359
```
截至撰写本文时，该漏洞**没有 CVSS 评分**，也没有任何**已知的漏洞利用**。
```
wget https://raw.githubusercontent.com/ndouglas-cloudsmith/ExploitPwned/refs/heads/main/exploitPwned.sh
chmod +x exploitPwned.sh
./exploitPwned.sh update
./exploitPwned.sh CVE-2026-53359
```
| 仓库 | URL |
| --- | --- |
| `Aoripus-LTD/Januscape-Hotfix` | https://github.com/Aoripus-LTD/Januscape-Hotfix |
| `0xBlackash/CVE-2026-53359` | https://github.com/0xBlackash/CVE-2026-53359 |
| `chuzhongyun/CVE-2026-53359-Kernel-Fix` | https://github.com/chuzhongyun/CVE-2026-53359-Kernel-Fix |
| `xj2268-TA/KVM-Januscape` | https://github.com/xj2268-TA/KVM-Januscape |
| `HORKimhab/CVE-2026-53359` | https://github.com/HORKimhab/CVE-2026-53359 |
```
wget https://raw.githubusercontent.com/ndouglas-cloudsmith/ExploitPwned/refs/heads/main/exploitPwned.sh
chmod +x exploitPwned.sh
./exploitPwned.sh update
./exploitPwned.sh CVE-2026-53359
```
| 仓库 | URL |
| --- | --- |
| `Aoripus-LTD/Januscape-Hotfix` | https://github.com/Aoripus-LTD/Januscape-Hotfix |
| `0xBlackash/CVE-2026-53359` | https://github.com/0xBlackash/CVE-2026-53359 |
| `chuzhongyun/CVE-2026-53359-Kernel-Fix` | https://github.com/chuzhongyun/CVE-2026-53359-Kernel-Fix |
| `xj2268-TA/KVM-Januscape` | https://github.com/xj2268-TA/KVM-Januscape |
| `HORKimhab/CVE-2026-53359` | https://github.com/HORKimhab/CVE-2026-53359 |标签：Cutter, KVM, Linux内核, Web报告查看器, 安全渗透, 安全漏洞, 应用安全, 提权, 虚拟化逃逸