A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-headersUpgrade kernel-develUpgrade perf | Apr 27, 2020 | Apr 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Feb 24, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 8, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-tools-libsUpgrade python-perfUpgrade perfUpgrade kernel-tools | Jun 17, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernelUpgrade perf | Apr 16, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 3, 2021 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade kernelUpgrade python3-perfUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-sourceUpgrade perfUpgrade kernel-toolsUpgrade python-perf | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 2, 2020 | Feb 24, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 8, 2020 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-obs-build | Mar 3, 2020 | Feb 24, 2020 |
| Ubuntu | — | Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-aws-edgeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.4.0-1064-awsUpgrade linux-image-gke-4.15Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-4.4.0-176-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-5.0.0-1035-azureUpgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-4.4.0-176-genericUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1104-awsUpgrade linux-image-4.4.0-176-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-5.0.0-1027-awsUpgrade linux-image-azureUpgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1068-kvmUpgrade linux-image-virtualUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-5.0.0-1043-oem-osp1Upgrade linux-image-powerpc-smpUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-91-genericUpgrade linux-image-azure-edgeUpgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-4.15.0-1063-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-edgeUpgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-4.4.0-176-lowlatencyUpgrade linux-image-powerpc64-embUpgrade linux-image-gke-5.0Upgrade linux-image-generic-lpaeUpgrade linux-image-awsUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-gke-5.3Upgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-4.4.0-176-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-5.3.0-42-genericUpgrade linux-image-4.4.0-176-powerpc64-embUpgrade linux-image-4.4.0-176-powerpc-smpUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-oracleUpgrade linux-image-kvmUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-1016-azureUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1074-azure | Mar 17, 2020 | Feb 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub