Skip to content
OpenAdvisories
High WID-SEC-2025-2007 6 CVEs

Xen: Mehrere Schwachstellen

Published Sep 9, 2025 · Updated Jul 9, 2026 · Revision 13 · de-DE

Vendor: Debian Vendor: Dell Vendor: Fedora Vendor: SUSE Product: Linux Product: Linux Product: Linux Product: NetWorker Product: openSUSE

Summary

Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzenEin Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Informationen offenzulegen oder Berechtigungen zu erweitern.

Product

Xen ist ein Virtueller-Maschinen-Monitor (VMM), der Hardware (x86, IA-64, PowerPC) für die darauf laufenden Systeme (Domains) paravirtualisiert.

Vulnerabilities 6

  • Critical 9.8
    CVE-2025-27466

    Mutiple vulnerabilities in the Viridian interface

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dere…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2025-58142

    Mutiple vulnerabilities in the Viridian interface

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dere…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2025-58143

    Mutiple vulnerabilities in the Viridian interface

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dere…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • Critical 9.4
    CVE-2025-58146

    XAPI UTF-8 string handling

    There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try generating the notification using the unsanitised input. This causes the database's event thread to terminate and cease further processing. 2. XAPI's UTF-8 encoder impl…

    Xen XAPI
  • High 7.5
    CVE-2025-58144

    Arm issues with page refcounting

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the c…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine
  • High 7.5
    CVE-2025-58145

    Arm issues with page refcounting

    [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the c…

    Xen Xen xen xen Virtualization Debian Ubuntu Alpine

Revision history

  1. #13

    Referenz(en) aufgenommen: EUVD-2025-210446

  2. #12

    Neue Updates von Dell aufgenommen

  3. #11

    Neue Updates von SUSE aufgenommen

  4. #10

    Neue Updates von SUSE aufgenommen

  5. #9

    Neue Updates von Debian aufgenommen

  6. #8

    Neue Updates von SUSE aufgenommen

  7. #7

    Neue Updates von SUSE aufgenommen

  8. #6

    Neue Updates von Fedora aufgenommen

  9. #5

    Neue Updates von Fedora aufgenommen

  10. #4

    Neue Updates von Fedora aufgenommen

  11. #3

    Neue Updates von openSUSE aufgenommen

  12. #2

    Neue Updates von European Union Vulnerability Database und SUSE aufgenommen

  13. #1

    Initiale Fassung

References