CVE-2024-43110

The ctlrequestsense function could expose up to three bytes of the kernel heap to userspace. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note th...

CVE-2024-43110

The CVE-2024-43110 issue affects FreeBSD ctl(4) CAM Target Layer. The ctl_request_sense function could expose up to three bytes of kernel heap to userspace. Guest VMs exposing virtio_scsi can trigger these vulnerabilities to achieve code execution on the host in the bhyve userspace process (typic...