CVE-2024-43110 is a vulnerability in the ctl_request_sense function that can expose up to three bytes of kernel heap memory to userspace. This flaw allows malicious software running inside a guest virtual machine with access to virtio_scsi to potentially execute code on the host system within the bhyve userspace process, which usually runs with root privileges. The bhyve process operates within a Capsicum sandbox, limiting the capabilities of any malicious code. Additionally, a malicious iSCSI initiator could exploit this vulnerability to achieve remote code execution on an iSCSI target host.