CVE-2024-8178 is a high-severity vulnerability in the ctl_write_buffer and ctl_read_buffer functions used by bhyve's virtio_scsi interface. These functions allocate memory to be returned to userspace without initializing it, which can be exploited by malicious software running in a guest VM. Exploitation could lead to code execution in the bhyve userspace process on the host, which typically runs with root privileges. However, bhyve operates within a Capsicum sandbox, limiting the capabilities of any malicious code. Additionally, a malicious iSCSI initiator could achieve remote code execution on the iSCSI target host.