# Any news on when a fixed release for Januscape (CVE-2026-53359), the KVM/x86 guest-to-host escape vulnerability, will be available?

**URL:** <https://forums.rockylinux.org/t/any-news-on-when-a-fixed-release-for-januscape-cve-2026-53359-the-kvm-x86-guest-to-host-escape-vulnerability-will-be-available/20658>\
**Category:** Rocky Linux Help & Support\
**Created:** [July 8, 2026, 6:39am UTC](https://forums.rockylinux.org/t/any-news-on-when-a-fixed-release-for-januscape-cve-2026-53359-the-kvm-x86-guest-to-host-escape-vulnerability-will-be-available/20658 "2026-07-08T06:39:47Z")\
**Posts on this page:** 1\
**Showing post:** 30

<div class="post-metadata">

**Author:** ![PF92](https://avatars.discourse-cdn.com/v4/letter/p/3bc359/32.png) [@PF92](https://forums.rockylinux.org/u/PF92)\
**Post date:** [July 14, 2026, 8:44am UTC](https://forums.rockylinux.org/t/any-news-on-when-a-fixed-release-for-januscape-cve-2026-53359-the-kvm-x86-guest-to-host-escape-vulnerability-will-be-available/20658/30 "2026-07-14T08:44:27Z")

</div>

RHEL has lost a lot of reputation by not providing important security updates on time, so I wouldn’t even use the free developer subscription, let alone a paid subscription. And it’s not okay that servers which are run not-for-profit can be vulnerable to exploits for a long time because they don’t pay for support. Such an attitude harms the Internet as a whole. Maintaining a Linux distribution is hard and if maintainers don’t have the manpower to provide security updates quickly then the purpose of such a distribution is questionable.

---

_[View the full topic](https://forums.rockylinux.org/t/any-news-on-when-a-fixed-release-for-januscape-cve-2026-53359-the-kvm-x86-guest-to-host-escape-vulnerability-will-be-available/20658)._