What’s Vulnerable › Vulnerabilities
CVE-2026-101310: Multiple vulnerabilities in bhyve device models
- Severity: high (CVSS 7.0 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-15 · updated 2026-10-16
- Weakness: CWE-126
Description
The HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream. A zero-length entry caused an out-of-bounds read or write during DMA transfer processing. BDL fields were also subject to modification by the guest after validation. A malicious guest can crash the bhyve process or potentially execute arbitrary code in the host userspace context running the virtual machine, subject to bhyve's Capsicum sandbox.
Affected products
- FreeBSD: from 15.1-RELEASE before p5; from 14.5-RELEASE before p2; from 14.4-RELEASE before p11 — fixed in p11, p2, p5
How to fix
Upgrade to a fixed version: FreeBSD p11, p2, p5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-101310 or the next vulnerability affects your stack