All vulnerabilities

Servers and applications

CVE-2025-58147

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause out-of-bounds reads and writes while processing the inputs. * CVE-2025-58147. Hypercalls using the…

Severity
High 7.5
Published
31 Oct 2025
Last changed
19 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • From 4.15.0 on

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-58147
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-58147