PT-2025-37188 · Linux+4 · Linux+4

Roger Pau · Published 2025-01-01 · Updated 2026-01-27 · CVE-2025-58143

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions (affected versions not specified)

Description The issue concerns a cross-platform hypervisor, Xen, within the Linux operating system kernel. It relates to synchronization errors when a shared resource is used, and a race condition during the mapping of a Time Stamp Counter (TSC) reference page. Successful exploitation may allow a remote attacker to compromise the hypervisor or the vulnerable system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-366

CWE-362

Related Identifiers

BDU:2025-12596

CVE-2025-58143

DSA-6068-1

MGASA-2025-0270

OPENSUSE-SU-2025:15547-1

SUSE-SU-2025:03172-1

SUSE-SU-2025:3797-1

SUSE-SU-2025:3798-1

SUSE-SU-2025:3843-1

SUSE-SU-2025_03172-1

SUSE-SU-2026:0012-1

SUSE-SU-2026:0303-1

Affected Products

Debian

Linux

Red Os

Suse

Xen

References · 76

• https://osv.dev/vulnerability/SUSE-SU-2025:3843-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-58143 · Security Note
• https://bdu.fstec.ru/vul/2025-12596 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-58143 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03172-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3797-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-58143 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-58143 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0303-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0270 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15547-1 · Vendor Advisory
• https://xenbits.xenproject.org/xsa/advisory-472.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-58143 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-58143 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0270.html · Security Note