Summary
Paulo Bonzini discovered that the KVM hypervisor implementation in the
Linux kernel could improperly let a nested (level 2) guest access the
resources of a parent (level 1) guest in certain situations. An attacker
could use this to expose sensitive information.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-176.206 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1104.115 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-kvm | 4.4.0-1068.75 |
Vulnerabilities 1
-
Medium 5.8
A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virt…
References
-
report
https://ubuntu.com/security/CVE-2020-2732