{"action":"Upgrade kvm-ioctls to 0.19.1 or later.","affected":[{"fixed":"0.19.1","introduced":"0"}],"component":"kvm-ioctls","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["0.19.1"],"ghsa_id":"GHSA-3qx8-rv27-j6gp","id":"tcs_01M5KES1XAPN4NWNYK7Y7BHR8Q","modified_at":"2025-10-28T06:29:22.787282Z","published_at":"2024-12-23T19:26:37Z","references":["https://osv.dev/vulnerability/GHSA-3qx8-rv27-j6gp","https://github.com/rust-vmm/kvm/pull/298","https://github.com/rust-vmm/kvm-ioctls","https://rustsec.org/advisories/RUSTSEC-2024-0428.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-3qx8-rv27-j6gp","url":"https://osv.dev/vulnerability/GHSA-3qx8-rv27-j6gp"}],"summary":"Undefined behaviour in `kvm_ioctls::ioctls::vm::VmFd::create_device`"}