Kvm Guest Drivers Windows
Approved changes feed: RSS · Atom
cpe:2.3:a:virtio-win:kvm-guest-drivers-windows:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Virtio Win (16459a1b-7fba-5b60-8edf-32a61581de3f) |
|---|---|
| Product | Kvm Guest Drivers Windows (0345734f-ea8a-5376-9eab-1b69dfdde613) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-46655 |
vulnerable | 2026-10-13 12:30:01.349851 |
virtio-win: Integer overflow causing a heap overflow in Viosock driver
HIGH (7.8)
virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTL_SELECT request with attacker-controlled VIRTIO_VSOCK_SELECT.Fdss[*].fd_count values that overflow the 32-bit sum used by VIOSockSelect for bounds checking. The wrapped sum can pass the FD_SETSIZE check even though an individual descriptor count is much larger than the expected limit. VIOSockSelectCopyFds then iterates using the unchecked count and writes beyond the allocated pPkt->Fds array in the NonPagedPool kernel heap. Successful exploitation can corrupt kernel memory and enable privilege escalation in a Windows guest running the driver. This issue is fixed in mm320.
Published: 2026-09-18T16:46:34.832Z
Updated: 2026-09-23T19:15:05.093Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.