Passing a partial GPU to a VM using vGPU and SRIOV.
This shared case can be dangerous.
How exactly does the GPU access the CVM's memory? Part of the memory is marked as shared, while encrypted.