Denial Of Service (DoS)

qemu is vulnerable to Denial of Service (DoS) attacks. Because hot-unplug is async, a race condition can occur in which the net device backend is cleared before the virtio-net pci frontend is removed. This time window might be used by a malicious attacker to trigger an assertion and cause a denial of service.