Hi, the German Bundesamt für Sicherheit in der Informationstechnik (Federal Office for Information Security) published a study on the security of KVM and QEMU:
https://www.bsi.bund.de/DE/Publikationen/Studien/Sicherheitsanalyse_KVM/sicherheitsanalyse_kvm.html (article only available in German) Summary (Google translated to English): "In summary, it can be said that the investigated components - above all KVM, QEMU and libvirt - are suitable for realizing a technically mature and secure virtualization environment." Regards Stefan Weil