CVE-2024-43110

The CVE-2024-43110 issue affects FreeBSD ctl(4) CAM Target Layer. The ctl_request_sense function could expose up to three bytes of kernel heap to userspace. Guest VMs exposing virtio_scsi can trigger these vulnerabilities to achieve code execution on the host in the bhyve userspace process (typic...