CVE-2026-45782
HighCVSS 8.9Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Cloud Hypervisor, a Virtual Machine Monitor for cloud workloads, has a use-after-free vulnerability in versions from 21.0 to before 51.2. The issue occurs when a guest submits two virtio-block descriptor chains that reuse the same head_index while asynchronous block I/O is enabled.
Risk Assessment
This vulnerability can lead to memory corruption, potentially resulting in unexpected system behavior or data leaks. Organizations should be aware of the risks associated with using unpatched software versions.
Recommendation
It is recommended to update Cloud Hypervisor to version 51.2 or newer to mitigate this vulnerability. Regular monitoring and updating of software is crucial for maintaining security.
Original NVD description (English source)
Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. From version 21.0 to before version 51.2, a guest can cause a use-after-free in the cloud-hypervisor process by submitting two virtio-block descriptor chains that reuse the same head_index while asynchronous block I/O is enabled (e.g. io_uring, aio). When the kernel completes the duplicate operation before the original, the completion path frees a bounce buffer that the kernel is still actively reading from or writing to, corrupting the freed memory. This issue has been patched in versions 51.2 and 52.0.