Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which allows attackers to cause a denial of service ("physical address not valid" panic) via a crafted application.Referenceshttps://bugs.chromium.org/p/project-zero/issues/detail?id=1674
