Feed
Breaking QEMU

A pseries guest can poke one slot before the watchdog table

Brief

A host sanitizer build crashes on that path.

Notes

eea4de1bd8e8 (Chinmay Rath, 2026-08-23). hw/watchdog. Add lower bound check for watchdogNumber. Closes #3600 (closed 2026-08-23, Kind::Security, CVE::Assigned, Target PPC). The patch does not name a CVE id. Do not invent one. Reported-by huntr bubble.

Landed on master with bde2492a Merge tag pull-ppc-for-11.2-20260823. Also in v11.1.1 (3e2849a3), v11.0.4 (590059ce), and v10.0.13 (3db78fee).

Commit eea4de1bd8e8bdaa9a69b130a1a154f7c113979f

Sources