Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines
An infinite loop flaw was found in the way QEMU's e1000 NIC emulation implementation processed data using transmit or receive descriptors under certain conditions. A privileged user inside a guest could use this flaw to crash the QEMU instance...