CVE-2018-20168

CVE-2018-20168 is a denial-of-service vulnerability affecting Google gVisor versions prior to 2018-08-22. The flaw stems from gVisor's reuse of a pagetable with an intact paging-structure cache, allowing an unprivileged attacker to trigger a "physical address not valid" panic and cause a denial of service through a crafted application. Rated as Medium severity (CVSS 5.5), this vulnerability requires user interaction (UI:R) and local access (AV:L) to exploit, leading to high availability impact (A:H). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.