QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled). https://nvd.nist.gov/vuln/detail/CVE-2018-20216