CVE-2016-9386, XSA-191: x86 null segments not always treated as unusable Reference CVE-2016-9382, XSA-192: x86 task switch to VM86 mode mis-handled Reference CVE-2016-9385, XSA-193: x86 segment base write emulation lacking canonical address checks Reference CVE-2016-9384, XSA-194: guest 32-bit ELF symbol table load leaking host data Reference CVE-2016-9383, XSA-195: x86 64-bit bit test instruction emulation broken Reference CVE-2016-9377, CVE-2016-9378, XSA-196: x86 software interrupt injection mis-handled Reference CVE-2016-9381, XSA-197: qemu incautious about shared ring processing Reference: CVE-2016-9379, CVE-2016-9380, XSA-198: delimiter injection vulnerabilities in pygrub Reference