An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c does not set NumVFs to PCISRIOVTOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-26328.json"