In a Linux KVM guest that has PV TLB enabled a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly affects AMD processors but Intel CPUs cannot be ruled out.

🗓️ 25 Sep 2020 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 3 Views

PV TLB bug in Linux KVM lets a guest read another guest memory; host 4.10, guest 4.16+, AMD likely.

Reporter	Title	Published	Views	Family All 187
Tenable Nessus	Amazon Linux 2 : kernel (ALAS-2020-1480)	26 Aug 202000:00	–	nessus
Tenable Nessus	Debian DSA-4699-1 : linux - security update	11 Jun 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP8 : kernel (EulerOS-SA-2020-1292)	23 Mar 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.6.0 : kernel (EulerOS-SA-2020-1342)	2 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : kernel (EulerOS-SA-2020-1536)	1 May 202000:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kernel (CVE-2019-3016)	3 Jul 202400:00	–	nessus
Tenable Nessus	Oracle Linux 8 : kernel (ELSA-2020-3010)	7 Sep 202300:00	–	nessus
Tenable Nessus	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5526)	31 Jan 202000:00	–	nessus
Tenable Nessus	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5528)	31 Jan 202000:00	–	nessus
Tenable Nessus	Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2020-5533)	12 Feb 202000:00	–	nessus

Vulners

Node

OR

microsoft azl3_kernel_6.6.92.2-1Range<6.6.29.1-4

microsoft azl3_kernel_6.6.29.1-4Range<-

microsoft azl3_kernel_6.6.29.1-4Range<-

microsoft cbl2_kernel_5.10.78.1-1Range<5.10.78.1-1

microsoft cm1_kernel_5.10.60.1-1Range<-

microsoft bpftool_6.6.29.1_4.azl3Range<-

microsoft python3_perf_6.6.29.1_4.azl3Range<-

microsoft kernel_tools_6.6.29.1_4.azl3Range<-

microsoft kernel_docs_6.6.29.1_4.azl3Range<-

microsoft kernel_drivers_sound_6.6.29.1_4.azl3Range<-

microsoft kernel_drivers_gpu_6.6.29.1_4.azl3Range<-

microsoft kernel_drivers_accessibility_6.6.29.1_4.azl3Range<-

microsoft kernel_devel_6.6.29.1_4.azl3Range<-

microsoft kernel_6.6.29.1_4.azl3Range<-

microsoft bpftool_6.6.29.1_4.azl3Range<-

microsoft python3_perf_6.6.29.1_4.azl3Range<-

microsoft kernel_tools_6.6.29.1_4.azl3Range<-

microsoft kernel_docs_6.6.29.1_4.azl3Range<-

microsoft kernel_drivers_sound_6.6.29.1_4.azl3Range<-

microsoft kernel_drivers_gpu_6.6.29.1_4.azl3Range<-

microsoft kernel_drivers_accessibility_6.6.29.1_4.azl3Range<-

microsoft kernel_devel_6.6.29.1_4.azl3Range<-

microsoft kernel_6.6.29.1_4.azl3Range<-

microsoft kernel_debuginfo_5.15.32.1_3.cm2Range<-

microsoft bpftool_5.15.32.1_3.cm2Range<-

microsoft kernel_dtb_5.15.32.1_3.cm2Range<-

microsoft python3_perf_5.15.32.1_3.cm2Range<-

microsoft kernel_tools_5.15.32.1_3.cm2Range<-

microsoft kernel_docs_5.15.32.1_3.cm2Range<-

microsoft kernel_drivers_sound_5.15.32.1_3.cm2Range<-

microsoft kernel_drivers_accessibility_5.15.32.1_3.cm2Range<-

microsoft kernel_devel_5.15.32.1_3.cm2Range<-

microsoft kernel_5.15.32.1_3.cm2Range<-

microsoft kernel_debuginfo_5.15.32.1_3.cm2Range<-

microsoft bpftool_5.15.32.1_3.cm2Range<-

microsoft python3_perf_5.15.32.1_3.cm2Range<-

microsoft kernel_tools_5.15.32.1_3.cm2Range<-

microsoft kernel_docs_5.15.32.1_3.cm2Range<-

microsoft kernel_drivers_sound_5.15.32.1_3.cm2Range<-

microsoft kernel_drivers_accessibility_5.15.32.1_3.cm2Range<-

microsoft kernel_devel_5.15.32.1_3.cm2Range<-

microsoft kernel_5.15.32.1_3.cm2Range<-

microsoft kernel_debuginfo_5.10.60.1_1.cm1Range<-

microsoft kernel_dtb_5.10.60.1_1.cm1Range<-

microsoft kernel_tools_5.10.60.1_1.cm1Range<-

microsoft kernel_docs_5.10.60.1_1.cm1Range<-

microsoft kernel_drivers_sound_5.10.60.1_1.cm1Range<-

microsoft kernel_drivers_accessibility_5.10.60.1_1.cm1Range<-

microsoft kernel_devel_5.10.60.1_1.cm1Range<-

microsoft kernel_5.10.60.1_1.cm1Range<-

microsoft kernel_debuginfo_5.10.60.1_1.cm1Range<-

microsoft kernel_tools_5.10.60.1_1.cm1Range<-

microsoft kernel_oprofile_5.10.60.1_1.cm1Range<-

microsoft kernel_docs_5.10.60.1_1.cm1Range<-

microsoft kernel_drivers_sound_5.10.60.1_1.cm1Range<-

microsoft kernel_drivers_accessibility_5.10.60.1_1.cm1Range<-

microsoft kernel_devel_5.10.60.1_1.cm1Range<-

microsoft kernel_5.10.60.1_1.cm1Range<-

19 Feb 2026 09:08Current

7High risk

Vulners AI Score7

CVSS 21.9

CVSS 3.14.7 - 6.2

EPSS0.00619

SSVC

paravirtualization memory access guest memory linux kernel vulnerability