CVE-2025-58150

Description

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

PUBLISHED Reserved 2025-08-26 | Published 2026-01-28 | Updated 2026-01-28 | Assigner XEN

Product status

Credits

This issue was discovered by Jan Beulich of SUSE. finder

References

www.openwall.com/lists/oss-security/2026/01/27/1

xenbits.xen.org/xsa/advisory-477.html

xenbits.xenproject.org/xsa/advisory-477.html

cve.org (CVE-2025-58150)

nvd.nist.gov (CVE-2025-58150)

Download JSON