CVE-2026-101310

The bhyve hypervisor contains a vulnerability in its HDA audio device model where it fails to validate zero-length Buffer Descriptor List (BDL) entries when starting a stream. This oversight can lead to out-of-bounds reads or writes during DMA transfer processing, as BDL fields can also be modifi...

EUVD-2026-101931

The HDA audio device model did not check for zero-length Buffer Descriptor List BDL entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious gue...