VYPR

virtio-serial-bus

by QEMU

CVEs (1)

  • CVE-2024-3446HigApr 9, 2024
    risk 0.53cvss 8.2epss 0.00

    A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU…