A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernelUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-debuginfo | Apr 27, 2020 | Apr 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Feb 24, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 8, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-tools-libsUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade python-perfUpgrade perfUpgrade kernel-tools | Jun 17, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Apr 16, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel | Feb 3, 2021 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade python3-perfUpgrade kernel-headersUpgrade perfUpgrade python-perfUpgrade kernel-sourceUpgrade kernel-tools | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 2, 2020 | Feb 24, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 8, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-buildUpgrade kernel-docs | Mar 3, 2020 | Feb 24, 2020 |
| Ubuntu | — | Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-176-powerpc-smpUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-176-genericUpgrade linux-image-4.4.0-176-powerpc-e500mcUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-1104-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-5.0Upgrade linux-image-genericUpgrade linux-image-4.15.0-91-genericUpgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-gke-4.15Upgrade linux-image-4.4.0-1064-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-4.4.0-176-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-raspi2Upgrade linux-image-lowlatencyUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-aws-hweUpgrade linux-image-5.0.0-1027-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-4.4.0-176-powerpc64-smpUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-5.0.0-1043-oem-osp1Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1063-awsUpgrade linux-image-virtualUpgrade linux-image-5.0.0-1035-azureUpgrade linux-image-powerpc-smpUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-4.4.0-1068-kvmUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-awsUpgrade linux-image-5.3.0-42-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-176-powerpc64-embUpgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-176-generic-lpaeUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-kvmUpgrade linux-image-5.3.0-1016-azureUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-oemUpgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-4.15.0-1074-azure | Mar 17, 2020 | Feb 24, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub