A virtio-gpu guest can abort the QEMU process by asking for a huge allocation
Brief
This is a host crash, not a claimed guest-to-host write.
Notes
eb2b3a1fa807 (Marc-André Lureau, 2026-08-25). virtio-gpu: use g_try_malloc to avoid guest-triggered abort. Resolves work_items/3898 (issues API 404). No public CVE id.
Same pull also has virtio-gpu resource, cursor, and blob checks, including 88436358. Landed with fe11f459. Not in v11.1.1, v11.0.4, or v10.0.13.
Commit eb2b3a1fa807f47515a1d86e434c60c981310bcd