The linked repo wasn't updated in 8 months, up-to-date code is here: https://www... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

lyu07282 on May 17, 2025 | parent | context | favorite | on: Oracle VM VirtualBox – VM Escape via VGA Device

The linked repo wasn't updated in 8 months, up-to-date code is here:

https://www.virtualbox.org/browser/vbox/trunk/src/VBox/Devic...

I think this was the fix:

https://www.virtualbox.org/changeset/108903/vbox/trunk/src/V...

johnisgood on May 17, 2025 [–]

Thanks. Wild. I bet the codebase is full of code like the originally exploitable one. At this point maybe one should use wrappers for all sorts of calculations. :D

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact