VULNERABILITY INTELLIGENCE

CVE-2020-2732

CVSS score5.8 MEDIUM
EPSS probability0.93%
CISA KEVNot currently listed
Published2020-04-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Description

A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 guest.

Weakness classification

  • nvd@nist.gov: CWE-200

Primary references