CVE-2025-58150

Published: Jan 28, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 2.0 / Impact: 6.0

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

Affected (1)

Products: Xen: Xen

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	All versions

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (3)

https://xenbits.xenproject.org/xsa/advisory-477.html

Source: security@xen.org

MitigationPatchVendor Advisory

http://www.openwall.com/lists/oss-security/2026/01/27/1

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListMitigationPatchThird Party Advisory

http://xenbits.xen.org/xsa/advisory-477.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchVendor Advisory

Timeline

No history available yet.