What’s Vulnerable › Vulnerabilities

CVE-2024-51563: bhyve(8) virtio_vq_recordon time-of-check to time-of-use race

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-12 · updated 2026-06-17
• Weakness: CWE-367

Description

The virtio_vq_recordon function is subject to a time-of-check to time-of-use (TOCTOU) race condition.

Affected products

• FreeBSD: all versions

References

• https://security.freebsd.org/advisories/FreeBSD-SA-24:17.bhyve.asc
• https://security.netapp.com/advisory/ntap-20250207-0008/

Get alerted when CVE-2024-51563 or the next vulnerability affects your stack