A 9.3-rated hypervisor escape needs only a few bad IPv4 packets from a guest, and the kernel fix is landing…