Note that the author didn't use any QEMU guest-to-host vulnerability here. The agent found a logic bug that facilitated going straight for the hypervisor from inside the guest, but it isn't caused by the use a memory-unsafe language.

Here is the fix: https://lore.kernel.org/qemu-devel/20260826181552.848617-3-p...

▲

justincormack 6 days ago | parent [-]

Ah thats an interesting one.

	▲	bonzini 6 days ago \| parent [-]
		And an old one. It's only needed for Windows XP/2003 and honestly it should be retired.