QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices which might allow local x86 HVM guests to gain privileges cause a denial of service (host crash) obtain sensitive information or possibly have other unspecified impact via unknown vectors.