AZL-105278
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-105278.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-105278
- Upstream
- CVE-2026-93834
- Published
- 2026-09-25T14:17:24Z
- Modified
- 2026-10-02T05:34:59Z
- Summary
- CVE-2026-93834 affecting package qemu 10.1.0-1
- Details
-
A use-after-free vulnerability was found in QEMU's 9pfs subsystem. A race condition between the main thread and a worker thread when processing concurrent Tlcreate and Twalk requests allows a malicious guest user to craft a fid path containing stale heap data, bypassing directory traversal restrictions and escaping the shared directory boundary. This can lead to arbitrary host file read/write and code execution (VM escape) as the QEMU process user.
- References