A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-toolsUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Apr 27, 2020 | Apr 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Feb 24, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 8, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Jun 17, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-develUpgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo | Apr 16, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade perfUpgrade python-perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Feb 3, 2021 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-sourceUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-headers | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 2, 2020 | Feb 24, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 8, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | Mar 3, 2020 | Feb 24, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-oem-osp1Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-176-lowlatencyUpgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-azureUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-4.15.0-91-genericUpgrade linux-image-gke-5.0Upgrade linux-image-genericUpgrade linux-image-4.4.0-176-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-aws-edgeUpgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.0.0-1043-oem-osp1Upgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-4.4.0-1064-awsUpgrade linux-image-gcpUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-aws-hweUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-edgeUpgrade linux-image-raspi2Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1063-awsUpgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-4.4.0-1104-awsUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-176-powerpc-e500mcUpgrade linux-image-4.4.0-1068-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1035-azureUpgrade linux-image-5.0.0-1027-awsUpgrade linux-image-gke-4.15Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-176-powerpc64-smpUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-176-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1016-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1074-azureUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-oemUpgrade linux-image-4.4.0-176-powerpc-smpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-gke-5.3Upgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-176-powerpc64-embUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-5.3.0-42-generic | Mar 17, 2020 | Feb 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub