Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact which allows attackers to cause a denial of service (\physical address not valid\ panic) via a crafted application.