HighFix available

xen — security advisory

Type: advisorySources: OSVAdvisory ID: DEBIAN-CVE-2025-58144

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144. And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.

Products: xen
Affected versions: 4.17.1+2-gb773c48e36-1, 4.17.2+55-g0b56bed864-1, 4.17.2+76-ge1f9cb16e2-1, 4.17.2+76-ge1f9cb16e2-1~deb12u1, 4.17.2-1, 4.17.3+10-g091466ba55-1, 4.17.3+10-g091466ba55-1.1, 4.17.3+10-g091466ba55-1.1~exp1, 4.17.3+10-g091466ba55-1.1~exp2, 4.17.3+10-g091466ba55-1~deb12u1, 4.17.3+36-g54dacb5c02-1, 4.17.5+23-ga4e5191dc0-1, 4.17.5+23-ga4e5191dc0-1+deb12u1, 4.20.0+68-g35cb38b222-1
Fixed versions: 4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1, 4.20.2+7-g1badcf5035-1
CVEs: CVE-2025-58144
Confirmed fixed CVEs: Not specified
Updated in this feed: 31 Oct 2026, 23:24 UTC · Revision 1

Source evidence

DEBIAN-CVE-2025-58144

core-osv · Original source

Published 11 Sept 2025, 14:15 UTC

osv:DEBIAN-CVE-2025-58144

xen

Fixed versions: 4.17.5+72-g01140da4e8-1

xen

Fixed versions: 4.20.2+7-g1badcf5035-0+deb13u1

xen

Fixed versions: 4.20.2+7-g1badcf5035-1

Complete source record

{
  "id": "082fbaaf6cf7ee2f00c7c3db2df9d9e0101e228853f0dcfa03ac98a376573c3c",
  "url": "https://osv.dev/vulnerability/DEBIAN-CVE-2025-58144",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "DEBIAN-CVE-2025-58144",
    "summary": "[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144. And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.",
    "evidence": "osv:DEBIAN-CVE-2025-58144",
    "products": [
      {
        "name": {
          "value": "xen",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.17.5+72-g01140da4e8-1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "4.17.1+2-gb773c48e36-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.2+55-g0b56bed864-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.2+76-ge1f9cb16e2-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.2+76-ge1f9cb16e2-1~deb12u1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.2-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.3+10-g091466ba55-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.3+10-g091466ba55-1.1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.3+10-g091466ba55-1.1~exp1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.3+10-g091466ba55-1.1~exp2",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.3+10-g091466ba55-1~deb12u1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.3+36-g54dacb5c02-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.5+23-ga4e5191dc0-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "4.17.5+23-ga4e5191dc0-1+deb12u1",
            "evidence": "/affected/0/versions"
          }
        ]
      },
      {
        "name": {
          "value": "xen",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.20.2+7-g1badcf5035-0+deb13u1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "4.20.0+68-g35cb38b222-1",
            "evidence": "/affected/1/versions"
          }
        ]
      },
      {
        "name": {
          "value": "xen",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.20.2+7-g1badcf5035-1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": [
          {
            "value": "4.20.0+68-g35cb38b222-1",
            "evidence": "/affected/2/versions"
          }
        ]
      }
    ],
    "severity": "high",
    "structured": {
      "id": "DEBIAN-CVE-2025-58144",
      "aliases": [
        "DEBIAN-CVE-2025-58144"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.17.5+72-g01140da4e8-1"
                }
              ]
            }
          ],
          "package": {
            "name": "xen",
            "purl": "pkg:deb/debian/xen?arch=source&distro=bookworm",
            "ecosystem": "Debian:12"
          },
          "versions": [
            "4.17.1+2-gb773c48e36-1",
            "4.17.2+55-g0b56bed864-1",
            "4.17.2+76-ge1f9cb16e2-1",
            "4.17.2+76-ge1f9cb16e2-1~deb12u1",
            "4.17.2-1",
            "4.17.3+10-g091466ba55-1",
            "4.17.3+10-g091466ba55-1.1",
            "4.17.3+10-g091466ba55-1.1~exp1",
            "4.17.3+10-g091466ba55-1.1~exp2",
            "4.17.3+10-g091466ba55-1~deb12u1",
            "4.17.3+36-g54dacb5c02-1",
            "4.17.5+23-ga4e5191dc0-1",
            "4.17.5+23-ga4e5191dc0-1+deb12u1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-58144.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.20.2+7-g1badcf5035-0+deb13u1"
                }
              ]
            }
          ],
          "package": {
            "name": "xen",
            "purl": "pkg:deb/debian/xen?arch=source&distro=trixie",
            "ecosystem": "Debian:13"
          },
          "versions": [
            "4.20.0+68-g35cb38b222-1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-58144.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "4.20.2+7-g1badcf5035-1"
                }
              ]
            }
          ],
          "package": {
            "name": "xen",
            "purl": "pkg:deb/debian/xen?arch=source&distro=forky",
            "ecosystem": "Debian:14"
          },
          "versions": [
            "4.20.0+68-g35cb38b222-1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-58144.json"
          },
          "ecosystem_specific": {
            "urgency": "not yet assigned"
          }
        }
      ],
      "modified": "2026-10-23T17:47:42.671411687Z",
      "provider": "osv",
      "upstream": [
        "CVE-2025-58144"
      ],
      "references": [
        "https://security-tracker.debian.org/tracker/CVE-2025-58144"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2025-58144",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 418491,
  "published_at": "2025-09-11T14:15:42.593+00:00"
}