hw/rdma/vmw/pvrdmacmd.c in QEMU allows attackers to cause a denial of service (NULL pointer dereference or excessive memory allocation) in createcqring or createqp_rings.
{ "urgency": "unimportant" }