CVEvulnerability
CVE-2025-58150
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-01-28
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
Shadow mode tracing code uses a set of per-CPU variables to avoid
cumbersome parameter passing. Some of these variables are written to
with guest controlled data, of guest controllable size. That size can
be larger than the variable, and bounding of the writes was missing.
Affected configurations
• xen xen
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://xenbits.xenproject.org/xsa/advisory-477.html Mitigation, Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/01/27/1 Mailing List, Mitigation, Patch, Third Party Advisory
- http://xenbits.xen.org/xsa/advisory-477.html Mailing List, Patch, Vendor Advisory