PT-2025-54614 · Xen · Xen

Jan Beulich · Published 2025-01-01 · Updated 2026-02-20 · CVE-2025-58150

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.18.5-r4

Description The issue involves shadow mode tracing code that utilizes per-CPU variables to streamline parameter passing. Certain variables are written to using guest-controlled data of a size determined by the guest. This size can exceed the variable's capacity, and the necessary bounds checking is absent. This can lead to memory corruption if a malicious guest exploits this flaw. The issue requires guest compromise to be exploited.

Recommendations Update to version 4.18.5-r4.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-58150

MGASA-2026-0026

OPENSUSE-SU-2026:10118-1

SUSE-SU-2026:0303-1

SUSE-SU-2026:0304-1

SUSE-SU-2026:0306-1

SUSE-SU-2026:0328-1

SUSE-SU-2026:0329-1

SUSE-SU-2026:0394-1

SUSE-SU-2026:0589-1

Affected Products

Xen

References · 54

• https://osv.dev/vulnerability/ALPINE-CVE-2025-58150 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-58150 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-58150 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0328-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2026/01/27/1 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0329-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-58150 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2026-0026.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-58150 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10118-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0589-1 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-477.html · Vendor Advisory
• https://xenbits.xenproject.org/xsa/advisory-477.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58150 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0394-1 · Vendor Advisory