Note that the author didn't use any QEMU guest-to-host vulnerability here. The agent found a logic bug that facilitated going straight for the hypervisor from inside the guest, but it isn't caused by the use a memory-unsafe language.

Here is the fix: https://lore.kernel.org/qemu-devel/20260826181552.848617-3-p...