QEMUtiny is a memory corruption vulnerability in QEMU’s implementation of CXL Type-3 device emulation, reported against QEMU master 007b29752e and confirmed working against 5e61afe (May 11, 2026).
1 Like
I didn’t know what “CXL” is, so here’s a resource on it:
From the PoC README:
We reported the bugs upstream. Maintainers state CXL support is currently for at non-virtualization use cases, so we feel comfortable release the PoC publicly.
The included
poc.cis a working exploit that drives the emulated CXL mailbox from the guest through the device BAR. It depends on offsets for the specific QEMU build and host libc layout. The exploit can be weaponized to work reliably across many QEMU versions using the OOB read to scan memory. However this is out of scope for this PoC.
So outstanding questions:
Does this work on generally deployed QEMU, or does the version they package with the exploit have special features enabled?
Is CXL just available on all Linux guests?
What can mitigate this? Looks like maybe some eBPF kprobes could do it, but that’s very manual. What else?