PT-2025-27564 · Xen+3 · Xen+3

Andrew Cooper · Published 2025-01-01 · Updated 2025-12-02 · CVE-2025-27465

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: xen (affected versions not specified)

Description: The issue allows an unprivileged guest to cause a hypervisor crash, resulting in a Denial of Service (DoS) of the entire host. This is due to incorrect stubs exception handling for flags recovery.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Handling of Exceptional Conditions

Improper Resource Release

Weakness Enumeration

CWE-755

CWE-404

Related Identifiers

BDU:2025-12579

CVE-2025-27465

DSA-6068-1

MGASA-2025-0270

OPENSUSE-SU-2025:15342-1

SUSE-SU-2025:02315-1

SUSE-SU-2025:02316-1

SUSE-SU-2025:02319-1

SUSE-SU-2025:02325-1

SUSE-SU-2025:02326-1

SUSE-SU-2025:02471-1

SUSE-SU-2025_02315-1

SUSE-SU-2025_02316-1

SUSE-SU-2025_02319-1

SUSE-SU-2025_02325-1

SUSE-SU-2025_02326-1

SUSE-SU-2025_02471-1

Affected Products

Debian

Red Os

Suse

Xen

References · 75

• https://osv.dev/vulnerability/SUSE-SU-2025:02326-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02319-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-27465 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-27465 · Vendor Advisory
• https://xenbits.xenproject.org/xsa/advisory-470.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02325-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0270 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-27465 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27465 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-27465 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0270.html · Security Note
• https://cve.org/CVERecord?id=CVE-2025-27465 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02316-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27465 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-470.html · Vendor Advisory