Quick Emulator(Qemu) built with the VirtFS, host directory sharing via Plan 9
File System(9pfs) support, is vulnerable to an improper link following issue.
It could occur while accessing symbolic link files on a shared host directory.
A privileged user inside guest could use this flaw to access host file system
beyond the shared folder and potentially escalating their privileges on a host.
Name: Jann Horn (Google Project Zero)
Created attachment 1241674 [details]
Proposed upstream patch v1
Created qemu tracking bugs for this issue:
Affects: fedora-all [bug 1413945]