CVE-2025-58150: x86: buffer overrun with shadow paging + tracing
Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58150?
CVE-2025-58150 is considered a high severity vulnerability due to its potential for buffer overrun exploits.
How do I fix CVE-2025-58150?
To fix CVE-2025-58150, users should apply the latest patches provided by the Xen Project.
What software versions are affected by CVE-2025-58150?
CVE-2025-58150 affects all versions of Xen that utilize shadow mode paging.
What is the nature of the vulnerability in CVE-2025-58150?
CVE-2025-58150 involves a buffer overrun in shadow mode tracing that can be exploited using guest controlled data.
Can CVE-2025-58150 be exploited remotely?
Yes, CVE-2025-58150 can potentially be exploited remotely if an attacker has access to a vulnerable Xen guest.