Search: CVE-2026-93834

CVE-2026-93834 is a use-after-free vulnerability in QEMU's 9pfs subsystem affecting Red Hat Enterprise Linux 10. It arises from a race condition between threads processing concurrent Tlcreate and Twalk requests, allowing a malicious guest user to bypass directory traversal restrictions and escape the shared directory boundary. This can lead to arbitrary host file read/write and code execution with the privileges of the QEMU process user, effectively enabling VM escape. The vulnerability requires an active 9pfs shared filesystem configured for the guest, which is not enabled by default in Red Hat Enterprise Linux virtualization configurations. Mitigation involves avoiding the use of 9pfs/VirtFS filesystem sharing and using virtio-fs as a safer alternative.