QEMU CVE-2022-3872

[love4taylor]

Is PVE affected by the CVE-2022-3872 vulnerability?

 

[t.lamprecht]

No, at least If you did not manually pass such a controller to a VM via the args VM config property.

Proxmox VE itself doesn't expose managing devices connected to the Secure Digital Host Controller bus, which would normally only makes sense for (emulating) MMC/SD cards.