USN-4303-2: Linux kernel (HWE) vulnerability

Published Mar 17, 2020

Updated

USN-4303-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Paulo Bonzini discovered that the KVM hypervisor implementation in the Linux kernel could improperly let a nested (level 2) guest access the resources of a parent (level 1) guest in certain situations. An attacker could use this to expose sensitive information.

Affected Software

1 affected component

Canonical Linux kernel (HWE)

Event History

May 10, 2025

Advisory Published

via Ubuntu·03:36 AM

Data Sourced

via Ubuntu·03:36 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2020-2732

Frequently Asked Questions

What is the vulnerability ID for this Linux kernel vulnerability?

The vulnerability ID for this Linux kernel vulnerability is CVE-2020-2732.

What is the severity of CVE-2020-2732?

The severity of CVE-2020-2732 is not mentioned in the provided information.

Which versions of Ubuntu are affected by this vulnerability?

Ubuntu 14.04 LTS is affected by this vulnerability.

How do I fix the Linux kernel vulnerability?

To fix the Linux kernel vulnerability, update the Linux kernel to version 4.4.0.176.155 or higher.

Where can I find more information about the Linux kernel vulnerability?

You can find more information about the Linux kernel vulnerability in the provided references: [Link 1](https://ubuntu.com/security/CVE-2020-2732), [Link 2](https://ubuntu.com/security/notices/USN-4303-1), [Link 3](https://ubuntu.com/security/notices/USN-4301-1).