[smoldesu]

Yeah, probably. DMA is always an issue when you're using PCI for graphics, so caveat emptor.

[eeegnu]

Hmm, in theory what if I used a dedicated GPU just for the VM that was disabled on the host. I don't know the space of these exploits well enough to know if there's an obvious attack that still leaves the host open to.