On: Flipping Pages: New Linux vulnerability in nf_tables and exploitation techniques

[wiredfool]

FWIW, hwe is hardware enablement, so bleeding edge kernel on older distro. KVM is specifically focused on KVM virtual machines.