> Does this have to be a physical CDROM or could a crafted ISO upload exploit the bug? Are cloud providers that allow uploading custom images affected by this?

> Does this have to be a physical CDROM or could a crafted ISO upload exploit the bug? Are cloud providers that allow uploading custom images affected by this? From the article: > Only x86 HVM guests with a virtual CDROM device are affected. ARM guests, x86 PV guests, x86 PVH guests, and x86 HVM guests without a virtual CDROM device are not affected.