It's also reported against the wrong package. Userland should not be
able to trigger a system freeze, so this is a bug in a kernel
component. Assuming that you're using libvirt to manage KVM/QEMU or
LXC then it's the kernel package (linux-image-4.14.0-0.bpo.4-amd64).