CVE-2015-8568: Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest...

Security readout for executives and security teams

This issue affects QEMU hosts that expose the VMware vmxnet3 virtual network adapter to guests. A user inside a guest VM could trigger a memory leak in the host process, potentially exhausting host memory and disrupting VMs. The sources do not show active exploitation or a CVSS score. Exposure is most likely in virtualization platforms or distributions running QEMU with vmxnet3 NIC emulation enabled for guest VMs. Systems not using QEMU, not built with vmxnet3 support, or not presenting vmxnet3 devices to guests are less likely exposed. Prioritize shared virtualization hosts where untrusted or semi-trusted users control guest VMs. The business risk is service disruption through host memory exhaustion. Treat as a patch and configuration review item, not an emergency exploitation response based on supplied evidence. Mitigation focus: Apply QEMU security updates from your Linux distribution or virtualization vendor.; Review Debian DSA-3471 and Gentoo GLSA-201602-01 for vendor remediation context.; Identify hosts exposing vmxnet3 virtual NICs to guest VMs..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.