Where would I find information about Januscape patch?

S

SecretProvider

New Member
Jul 16, 2026
3
0
1
Hey, where would I see an update for the CVE patch? I have no clue where to actually look for an update for it // when an announcement is made on the patch/update released, where would I find it?

for no subscription setup.

Thanks a lot.

I'm on the trixie repo
 
Last edited:
UPON checking the forum, ive found proxmox-kernel-6.17.13-16-pve-signed - is this the patched version, I would love confirmation.
 
ProxmoxSecurityAdvisory

Post in thread 'Proxmox Virtual Environment - Security Advisories'

Subject: PSA-2026-00027-1: Januscape: Guest-to-Host Escape in KVM/x86​


Advisory date: 2026-07-08

Packages: proxmox-kernel-*

Details:

A use-after-free issue in the Linux kernel's handling of shadow MMU emulation in KVM allows an attacker inside a VM with nested KVM enabled to escape from the guest to the host. Users which are allowed to access /dev/kvm can also exploit this issue to obtain root privileges.

Disabling nested KVM mitigates the issue. Changing whether nested KVM is enabled requires either stopping all VMs, unloading and reloading the module or...
 
  • Like
Reactions: SecretProvider
JTY said:
ProxmoxSecurityAdvisory

Post in thread 'Proxmox Virtual Environment - Security Advisories'

Subject: PSA-2026-00027-1: Januscape: Guest-to-Host Escape in KVM/x86​


Advisory date: 2026-07-08

Packages: proxmox-kernel-*

Details:

A use-after-free issue in the Linux kernel's handling of shadow MMU emulation in KVM allows an attacker inside a VM with nested KVM enabled to escape from the guest to the host. Users which are allowed to access /dev/kvm can also exploit this issue to obtain root privileges.

Disabling nested KVM mitigates the issue. Changing whether nested KVM is enabled requires either stopping all VMs, unloading and reloading the module or...
Click to expand...
excellent topic solved feel free to close
 
You must log in or register to reply here.
Top Bottom
Back