FreeBSD: VID-56d76414-6b50-11ef-9a62-002590c1f29c (CVE-2024-41928): FreeBSD -- bhyve(8) privileged guest escape via TPM device passthrough

Malicious software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process.