[necovek]

Can you elaborate? Has it been shown that copy-fail can break through KVM boundaries in Linux?

I understood it to be local-only (which is more likely to affect containers, bit I don't thinkmthat was demonstrated either).