A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernelUpgrade perfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64 | Apr 27, 2020 | Apr 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Feb 24, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 8, 2020 |
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | May 13, 2020 | Apr 8, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-debugUpgrade kernelUpgrade kernel-debuginfo | Jun 17, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernelUpgrade perfUpgrade kernel-headersUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perf | Apr 16, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernelUpgrade kernel-develUpgrade kernel-headersUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perf | Feb 3, 2021 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade python3-perf | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Mar 2, 2020 | Feb 24, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 8, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2020 | Apr 8, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-default-extra | Mar 3, 2020 | Feb 24, 2020 |
| Ubuntu | — | Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-oracleUpgrade linux-image-snapdragonUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-kvmUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-176-powerpc64-embUpgrade linux-image-4.4.0-176-powerpc-smpUpgrade linux-image-5.3.0-1013-awsUpgrade linux-image-5.3.0-42-genericUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1074-azureUpgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-4.4.0-176-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1016-azureUpgrade linux-image-oemUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-4.4.0-1104-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-176-powerpc-e500mcUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.0.0-1043-oem-osp1Upgrade linux-image-4.4.0-176-genericUpgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc-smpUpgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.15.0-91-genericUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-4.15.0-1063-awsUpgrade linux-image-gke-5.0Upgrade linux-image-4.4.0-1064-awsUpgrade linux-image-4.4.0-176-lowlatencyUpgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-aws-edgeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-raspi2Upgrade linux-image-gke-4.15Upgrade linux-image-powerpc-e500mcUpgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1068-kvmUpgrade linux-image-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-genericUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-5.0.0-1027-awsUpgrade linux-image-4.4.0-176-powerpc64-smpUpgrade linux-image-aws-hweUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-5.0.0-1035-azureUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-gcp-edgeUpgrade linux-image-raspi2-hwe-18.04 | Mar 17, 2020 | Feb 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub