CVE-2016-5107 on Ubuntu 16.04 LTS (xenial) - negligible.
Description:
The megasas_lookup_frame function in QEMU, when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds read and crash) via unspecified vectors.