A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.173-137.228Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-devel | Apr 27, 2020 | Apr 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Feb 24, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 8, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2020 | Apr 8, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-debugUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Jun 17, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo | Apr 16, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Feb 3, 2021 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernelUpgrade python3-perf | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 2, 2020 | Feb 24, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 8, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-default-extra | Mar 3, 2020 | Feb 24, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-smpUpgrade linux-image-oracleUpgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-42-genericUpgrade linux-image-gkeUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-awsUpgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-176-generic-lpaeUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-kvmUpgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oemUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1074-azureUpgrade linux-image-4.4.0-176-powerpc-smpUpgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-gke-5.3Upgrade linux-image-5.3.0-1016-azureUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.4.0-176-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-4.4.0-1064-awsUpgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-aws-edgeUpgrade linux-image-generic-lpaeUpgrade linux-image-gke-4.15Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-1063-awsUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-4.4.0-176-genericUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-5.0.0-1043-oem-osp1Upgrade linux-image-4.4.0-1068-kvmUpgrade linux-image-4.4.0-1104-awsUpgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.4.0-176-lowlatencyUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-4.4.0-176-powerpc-e500mcUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-azure-edgeUpgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-91-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-gke-5.0Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-4.4.0-176-powerpc64-smpUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1035-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1027-awsUpgrade linux-image-azureUpgrade linux-image-snapdragon-hwe-18.04 | Mar 17, 2020 | Feb 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub