PT-2025-43034 · Xen+3 · Xen+3

Teddy Astie · Published 2025-01-01 · Updated 2026-01-05 · CVE-2025-58148

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions xen (affected versions not specified)

Description Certain hypercalls within xen can be specified in a manner that presents a security concern. The description does not provide details about the nature of the issue or any specific technical details regarding exploitation, such as API endpoints or vulnerable parameters. There is no information about the number of potentially affected devices or any real-world incidents where this issue has been exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2025-15609

CVE-2025-58148

DSA-6068-1

MGASA-2025-0270

SUSE-SU-2025:3793-1

SUSE-SU-2025:3797-1

SUSE-SU-2025:3798-1

SUSE-SU-2025:3843-1

SUSE-SU-2026:0012-1

Affected Products

Debian

Red Os

Suse

Xen

References · 70

• https://security-tracker.debian.org/tracker/CVE-2025-58148 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3843-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-58148 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3797-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-58148 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3793-1 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-475.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58148 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-58148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-58148 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0270 · Vendor Advisory
• https://xenbits.xenproject.org/xsa/advisory-475.html · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0270.html · Security Note
• http://openwall.com/lists/oss-security/2025/10/21/1 · Patch
• https://osv.dev/vulnerability/ALPINE-CVE-2025-58148 · Vendor Advisory