5.8
Medium
CVE-2020-2732 A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested…
Description
A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Oracle Linux | 7 | No fix stated |
| Oracle Linux | 6 | No fix stated |
Other CVEs of Oracle Linux
The 10 CVEs of Oracle Linux →
CVE-2026-35233
An unprivileged attacker can craft a user-space process with a malicious ELF binary containing an out-of-range sh_link…
4.4
Medium
CVE-2026-21996
An unprivileged attacker can reliably trigger a crash of the dtrace process with a malicious ELF binary due to an…
3.3
Low
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names
5.5
Medium
CVE-2022-21505
In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with…
6.7
Medium