Database/Kernel, userspace & hypervisor
VMware ESXi / Workstation / Fusion: Heap out-of-bounds write in the USB 2.0 EHCI controller
CVE-2022-31705Kernel, userspace & hypervisorcurated
Impact
Heap out-of-bounds write in the USB 2.0 EHCI controller - VM escape to VMX process code execution (GeekPwn 2022)
Who can reach it
Tenant VM guest (local admin inside the VM)
What to do
ESXi patch + host reboot with evacuation; remove USB controllers from tenant VM templates
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.