KB5041773: Windows Server 2016 Security Update (August 2024)

An attacker who can deliver crafted network traffic to a host running Windows Network Virtualization — typically from a guest VM, but potentially from the underlying physical network depending on configuration — can trigger the use-after-free and execute code. The companion CVE-2024-38160 in the same patch cycle is a heap-based buffer overflow with similar impact.

Windows Network Virtualization is the layer that lets Hyper-V hosts present virtual networks to guest VMs — including overlays like NVGRE / VXLAN and the network isolation between tenant VMs. A use-after-free flaw in the network virtualisation code lets crafted network traffic corrupt memory and execute code in the host's networking stack.

Probably yes if any of these apply:

A multi-tenant Hyper-V host runs Network Virtualization to isolate tenant VMs onto separate virtual networks. One tenant is compromised; the attacker sends crafted network traffic that triggers the use-after-free in the virtualisation layer and gains code execution in the host's networking stack. From there they can pivot to other tenants' virtual networks or to the host itself.