CVEvulnerability
CVE-2025-58142
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2025-09-11
- Last modified
- 2026-10-19
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-395
Description
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
There are multiple issues related to the handling and accessing of guest
memory pages in the viridian code:
1. A NULL pointer dereference in the updating of the reference TSC area.
This is CVE-2025-27466.
2. A NULL pointer dereference by assuming the SIM page is mapped when
a synthetic timer message has to be delivered. This is
CVE-2025-58142.
3. A race in the mapping of the reference TSC page, where a guest can
get Xen to free a page while still present in the guest physical to
machine (p2m) page tables. This is CVE-2025-58143.
Affected configurations
• xen xen (>= 4.13.0 < 4.17.0)
Related
Weakness · CWE (1)
- CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference weakness
References
- https://xenbits.xenproject.org/xsa/advisory-472.html Vendor Advisory
- http://www.openwall.com/lists/oss-security/2025/09/09/1 www.openwall.com
- http://xenbits.xen.org/xsa/advisory-472.html xenbits.xen.org