I found a KVM guest-to-host heap corruption bug and someone else got there first

The 90 Day disclosure policy is dead

Score by Collisions, Patch by Panic

score by collisions, patch by panic