Looks like this has nothing to do with the hypervisor, it's not a traditional VM escape