A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
CVSS Details
- CVSS 3.1 Base Score: 5.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.173-137.228Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-headersUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfo | Apr 27, 2020 | Apr 8, 2020 |
| Amazon_linux | — | Upgrade kernel | Apr 24, 2020 | Feb 24, 2020 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 8, 2020 |
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2020 | Apr 8, 2020 |
| Debian | — | Upgrade linux | Apr 30, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-develUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade perf | Jun 17, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernelUpgrade python-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64 | Apr 16, 2020 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Feb 3, 2021 | Apr 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-develUpgrade bpftoolUpgrade kernel-headersUpgrade python-perfUpgrade perfUpgrade kernel-sourceUpgrade kernel-tools | Mar 24, 2020 | Mar 23, 2020 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Mar 2, 2020 | Feb 24, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Apr 8, 2020 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernel | May 13, 2020 | Apr 8, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-obs-build | Mar 3, 2020 | Feb 24, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1055-gkeUpgrade linux-image-4.4.0-1068-kvmUpgrade linux-image-virtualUpgrade linux-image-4.15.0-1035-oracleUpgrade linux-image-4.4.0-176-powerpc64-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-raspi2-hwe-18.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.15.0-91-lowlatencyUpgrade linux-image-azureUpgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.4.0-1064-awsUpgrade linux-image-5.0.0-1027-awsUpgrade linux-image-aws-edgeUpgrade linux-image-5.3.0-42-generic-lpaeUpgrade linux-image-5.3.0-1019-raspi2Upgrade linux-image-gcp-edgeUpgrade linux-image-4.15.0-1074-snapdragonUpgrade linux-image-generic-lpaeUpgrade linux-image-5.3.0-42-lowlatencyUpgrade linux-image-5.3.0-1011-oracleUpgrade linux-image-5.0.0-1035-azureUpgrade linux-image-4.4.0-176-lowlatencyUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-powerpc64-embUpgrade linux-image-4.15.0-1058-gcpUpgrade linux-image-4.4.0-176-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-1104-awsUpgrade linux-image-4.4.0-176-powerpc-e500mcUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.0.0-1013-oracleUpgrade linux-image-4.15.0-1076-oemUpgrade linux-image-4.15.0-91-genericUpgrade linux-image-5.0.0-1043-oem-osp1Upgrade linux-image-gke-5.0Upgrade linux-image-gcpUpgrade linux-image-5.3.0-1012-kvmUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-oem-osp1Upgrade linux-image-azure-edgeUpgrade linux-image-5.3.0-1014-gkeUpgrade linux-image-4.15.0-1063-awsUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-5.3.0-1013-awsUpgrade linux-image-4.15.0-1075-azureUpgrade linux-image-4.4.0-176-powerpc64-embUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gke-5.3Upgrade linux-image-4.4.0-176-powerpc-smpUpgrade linux-image-5.0.0-1033-gcpUpgrade linux-image-4.15.0-1056-kvmUpgrade linux-image-4.4.0-176-generic-lpaeUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.3.0-42-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.0.0-1032-gkeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.3.0-1016-azureUpgrade linux-image-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.3.0-42-snapdragonUpgrade linux-image-4.15.0-1074-azureUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-4.15.0-91-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.3.0-1014-gcpUpgrade linux-image-4.15.0-1057-raspi2Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem | Mar 17, 2020 | Feb 24, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub