How many virtual systems need/have virtual floppies?
None of the half-a-dozen real systems I have at home, nor the several I touch at work, have real floppies. So who needs a virtualized one and why?
Or is it the case that people use ill-considered cookie-cutter templates that provide virtual floppies as if it were virtually the 20th century?
If so, can't you mitigate the issue by just removing the virtual floppy drive?
EDIT: I guess my questions were answered in the crowdstrike article further down:
quote:
For many of the affected virtualization products, a virtual floppy drive is added to new virtual machines by default. And on Xen and QEMU, even if the administrator explicitly disables the virtual floppy drive, an unrelated bug causes the vulnerable FDC code to remain active and exploitable by attackers.
