+1 what Sean said, agree based on (1) the fact that this mode of operation has already been publicly documented on the neutron side and (2) cannot adversely affect anyone using in-tree drivers and (3) requires an advanced deployment topology in order to be affected (VF + tunneled + unsupported NIC or PF + tunneled + no proper TOR config), it's likely OK to work on this through the normal public channels.
+1 what Sean said, agree based on (1) the fact that this mode of operation has already been publicly documented on the neutron side and (2) cannot adversely affect anyone using in-tree drivers and (3) requires an advanced deployment topology in order to be affected (VF + tunneled + unsupported NIC or PF + tunneled + no proper TOR config), it's likely OK to work on this through the normal public channels.