bhyve is the native FreeBSD hypervisor, also used in appliances and some cloud and storage products built on FreeBSD. It emulates guest devices in a host user-space process, so its attack model mirrors QEMU's: reach the FreeBSD host that controls the guests, and escape a guest through flaws in the emulated device models.

Subtopics#

• Host access and shell: reaching the FreeBSD host.
• Guest to host escape: breaking out through device models.
• Known escape exploits: named bhyve breakouts.

References#

• FreeBSD Handbook: bhyve
• bhyve man page