CVE-2018-20168: Google Gvisor

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.

Affected products

• Google Gvisor: before 2018-08-22 (fixed in 2018-08-22)

Published 2018-12-17. Last modified 2026-06-17.