Memory leak in the __kvm_set_memory_region function in virt/kvm/kvm_main.c
in the Linux kernel before 3.9 allows local users to cause a denial of
service (memory consumption) by leveraging certain device access to trigger
movement of memory slots.

A flaw in the handling of memory regions of the kernel virtual machine
(KVM) subsystem was discovered. A local user with the ability to assign a
device could exploit this flaw to cause a denial of service (memory
consumption).

jdstrand

attacker requires privileged access to the host hardware to exploit per kernel team, too intrusive to backport