CVE-2026-5747: Eager Device Instantiation Dos

Eagerly instantiating devices within a pre-boot configuration builder causes host resources (like memory mappings and file descriptors) to be allocated prematurely. An attacker can exploit this via the configuration API by making repeated or oversized device requests, leading to Resource Exhaustion and Denial of Service prior to VM start. Instead of allocati

Provally CuratedPublic repositoryHighMedium confidenceVerifiedApache-2.0Rust
greprules fetch cve-2026-5747-eager-device-instantiation-dos --engine opengrep

Description

Eagerly instantiating devices within a pre-boot configuration builder causes host resources (like memory mappings and file descriptors) to be allocated prematurely. An attacker can exploit this via the configuration API by making repeated or oversized device requests, leading to Resource Exhaustion and Denial of Service prior to VM start. Instead of allocati