• circuscritic@lemmy.caEnglish
    10 months

    I skimmed most of the article, glad to see it’s been patched.

    It looks like the attack vector requires access to a VM on the host machine i.e. public cloud/VPS.

    So maybe not a huge risk exclusively for self hosted configurations?

    • frongt@lemmy.zipEnglish
      10 months

      Mostly no, unless you expose your VM to the Internet or run untrusted code.

          • ferret@sh.itjust.worksEnglish
            10 months

            It is a CPU vulnerability, so while the researchers used QEMU for their example, it is not necessarily specific to it.