tag

Pointer-Leak

QEMU CXL Type-3 Mailbox Guest-to-Host Escape

None assigned as of 2026-07-03· QEMU (CXL Type-3 device emulation, hw/cxl/cxl-mailbox-utils.c) unpatched