Google pays $250K for Linux vulnerability allowing guest VM escapes

Google has awarded a $250,000 bounty for the discovery of a high-severity Linux kernel vulnerability known as 'Januscape.' The flaw, which existed for 16 years, could allow attackers to escape virtual machines and gain root access to host systems.
Why it matters
This discovery highlights the persistent security risks in foundational open-source software used by major cloud infrastructure providers.
MORE LINUX THREATS Google pays $250K for Linux vulnerability allowing guest VM escapes Both vulnerabilities allow untrusted users to gain root privileges.
The article is a straightforward technical report on a security vulnerability and a corporate bounty program.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in