Shameless hijack …

@dexter do you know whether it's possible to use Wayland with FreeBSD in QEMU?

I use the Virtual Machine Manager GUI.

Kubuntu 26.04 host, an old HP ZBook 17 G2. Plasma Optimus set to use the NVIDIA GPU alone (if true: the Intel GPU is not in use).

Context: <https://www.reddit.com/r/freebsd/comments/1tgt2sg/comment/omo64rr/?context=1> "… I have a vague plan to continue experimenting with QEMU. …"

#FreeBSD #Wayland #QEMU

Big news. A Qemu escape. Are you ready? Panic!!1!

https://www.reddit.com/r/blueteamsec/comments/1tfgm80/qemutiny_is_a_memory_corruption_vulnerability_in/

Wait, CXL? Reddit as a source? AI off, brain on moment incoming...

CXL, that's for FPGAs. The escape isn't for x86 or ARM. It's not even for virtio.

Typical Proxmox CE deployments use AppArmor Sandboxing. Guest-to-host escapes are possible, but not this way.

It's not that Qemu is a fortress of years of great security auditing. That's not my point. My point is that the AI hype for vuln hunting is a fata morgana. Unless you work hard, you get nothing with or without AI.

You are welcome.

#qemu #debian #proxmox #kvm #linux

https://github.com/v12-security/pocs/tree/main/qemu

The worst thing, people are providing pocs before maintainers and upstreams have time to fix.

#qemu #kvm #kubevirt #security #vm #kvm