NEWS
NEWS
In the news: New Linux Flaw Lets Attackers Escape VMs; Three Lines of Code Improve Linux Storage Performance; AUR Hit Again with Malicious Packages; Alpine Linux 3.24 Features Fresh Desktops and a Newer Kernel; EU Open Source Strategy Plays Key Role in Tech Sovereignty Package; Linux Foundation Report Indicates AI Driving Tech Hiring; and United Nations Open Source Portal Goes Live.
New Linux Flaw Lets Attackers Escape VMs
Security researcher Hyunwoo Kim, who goes by the name V4bel online, discovered the vulnerability and released an abstract on GitHub (https://github.com/V4bel/Januscape) about it stating, "Januscape is a use-after-free vulnerability in the shadow MMU emulation of KVM/x86." Kim continues, "It can trigger the bug with guest-side actions alone to corrupt the host kernel's shadow page, and it can threaten the guest-host isolation of KVM/x86 hosts that accept untrusted guests and expose nested virtualization, particularly multi-tenant x86 public clouds (GCP, AWS, etc.)." In the abstract, Kim also demonstrates how this attack can be made via proof-of-concept to trigger a kernel panic.
Kim also claims that Januscape was the basis for the zero-day exploit in Google kvmCTF (https://security.googleblog.com/2024/06/virtual-escape-real-reward-introducing.html), which (according to Google) "is a vulnerability reward program designed to help identify and address vulnerabilities in the Kernel-based Virtual Machine (KVM) hypervisor. It offers a lab environment where participants can log in and utilize their exploits to obtain flags."
Januscape is the first guest-to-host exploit that can be triggered on both AMD and Intel architectures, and it could allow an attacker to do things like panic the kernel on the host and take down every tenant VM.
[...]
Buy Linux Magazine
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Subscribe to our ADMIN Newsletters
Digital Autonomy
• The Answer Was Already on the Shelf
• Changing the Chip Industry: How Public Investment Has Grown Open Silicon
• United Nations Open Source Portal Goes Live
• EU Open Source Strategy Plays Key Role in Tech Sovereignty Package
• France Says “Au Revoir” to Microsoft
Support Our Work
Linux Magazine content is made possible with support from readers like you. Please consider contributing when you’ve found an article to be beneficial.
News
-
AI Helped Develop a Linux Exploit
A use-after-free race exploit was discovered and exploited on CentOS Stream 9.
-
Yet Another Linux Kernel Vulnerability Discovered
Affecting millions of systems, a kernel flaw discovered by Qualys could allow users to gain root privileges.
-
Ubuntu 26.10 to Include Ubuntu Certified Hardware Check
If you've ever wondered if your laptop or PC is officially certified to run Ubuntu, that curiosity will soon be met.
-
Substantial Update to IPFire Now Available
The lastest version of IPFire features a fundamental change to how the system handles DNS.
-
Gnome Working on Test Center App to Make Testing Easier
It's now possible to test experimental features on the Gnome desktop without worrying that you'll break things.
-
New Vulnerability Discovered in Linux Kernel
Hiding out for nearly 15 years, the Ghostlock vulnerability allows a standard logged-in user to gain root privileges.
-
New Linux Flaw Lets Attackers Escape VMs
A 16-year-old vulnerability allows an attacker to escape a virtual machine, gain access to the host, and execute malicious code.
-
Hannah Montana Linux Is Back!
Developer Noah Cagle decided the world needed the once obscure but beloved Linux distribution and gave it a decidedly pink refresh.
-
System76 Refreshes the Lemur Laptop
If you're looking for a laptop with tons of power and battery, look no further than the latest iteration of the System76 Lemur Pro.
-
More than 43 Million Lines of Code in Linux Kernel 7.2
Using the cloc utility, Michael Larabel of Phoronix discovered that Linux kernel 7.2 has over 43 million lines of code.