A subtle emulation bug in QEMU’s LSI Logic SCSI device implementation — tracked as CVE‑2023‑0330 — allows a malicious guest to repeatedly trigger DMA operations that re‑enter the MMIO path and ultimately overflow the host process stack, producing a high‑impact availability failure for the host...