What’s Vulnerable › Vulnerabilities

CVE-2024-51566: bhyve(8) NVMe driver to guest-induced infinite loops.

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-12 · updated 2026-06-17
• Weakness: CWE-1285

Description

The NVMe driver queue processing is vulernable to guest-induced infinite loops.

Affected products

• FreeBSD: all versions

References

• https://security.freebsd.org/advisories/FreeBSD-SA-24:17.bhyve.asc
• https://security.netapp.com/advisory/ntap-20250207-0008/

Get alerted when CVE-2024-51566 or the next vulnerability affects your stack