Moby HyperKit uninitialized memory use in virtio-sock pci_vtsock_proc_tx

A malicious guest operating system can exploit a flaw in HyperKit's disk driver to read sensitive memory from the host machine. This allows attackers running inside a virtual machine to steal confidential data from the host system.

An uninitialized memory vulnerability in the virtio-sock PCI device handler (pci_vtsock_proc_tx) allows a guest with disk access to trigger information disclosure of host memory. The attack requires the attacker to control the guest OS and leverage the disk driver interface; successful exploitation results in confidentiality breach of host memory contents.