&gt; The sVirt and Seccomp functionalities used to restrict host&#x27;s QEMU process privileges and resource access might mitigate the impact of successful exploitation of this issue.<p>seccomp is pretty awesome IMO.  Would that more software opted in to dropping unneeded system access.