CVE-2017-5857

Memory leak in the virgl_cmd_resource_unref function in
hw/display/virtio-gpu-3d.c in QEMU (aka Quick Emulator) allows local guest
OS users to cause a denial of service (host memory consumption) via a large
number of VIRTIO_GPU_CMD_RESOURCE_UNREF commands sent without detaching the
backing storage beforehand.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=1418382&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=853996&gt;