Denial of Service Vulnerability in HyperKit by Moby

CVE-2021-32844

Summary

HyperKit, a toolkit for embedding hypervisor capabilities, is susceptible to a notable vulnerability in its vi_pci_write function that fails to validate null pointers. This oversight can lead to severe stability issues, causing the host machine to crash when a guest attempts to perform certain operations. As a result, this can effectively create a denial of service condition for users relying on HyperKit's functionality. To mitigate this issue, users should upgrade to the patched version as indicated in the latest commits.

References