Database/Kernel, userspace & hypervisor

KVM (nested VMX): Missing CR0/CR4 consistency checks in nVMX - L2 guest can break nested-virt assumptions / crash host
CVE-2023-30456Kernel, userspace & hypervisorcurated
Impact
Missing CR0/CR4 consistency checks in nVMX - L2 guest can break nested-virt assumptions / crash host
Who can reach it
Tenant VM guest running nested virtualisation
What to do
Kernel patch + reboot. Cheaper interim control: disable nested virtualisation for tenant VMs, which most GPU tenants do not need
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.