A Hyper-V child partition talks to the host through synthetic devices over VMBus. The virtual switch parses guest network frames in the host kernel, the VM worker process (vmwp.exe) services synthetic storage, video, and input devices in the parent partition, and VMBus carries all of it. Each parses guest-controlled data, so flaws there run code in the host, in the kernel or the worker process depending on the component.
Subtopics#
- Virtual switch: guest network frames parsed in the host kernel.
- Synthetic devices: storage, video, and input in the worker process.
- VMBus: the channel and ring-buffer transport.