VYPR

bhyve

by Bhyve

CVEs (1)

  • CVE-2024-42416HigSep 5, 2024
    risk 0.57cvss 8.8epss 0.00

    The ctl_report_supported_opcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to…