CVE-2025-58143
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-11

Last updated on: 2025-11-04

Assigner: Xen Project

Description
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466. 2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142. 3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-11
Last Modified
2025-11-04
Generated
2026-05-07
AI Q&A
2025-09-11
EPSS Evaluated
2026-05-05
NVD
CVE-2025-58143
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
xen xen From 4.13.0 (inc) to 4.17.0 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-366 If two threads of execution use a resource simultaneously, there exists the possibility that resources may be used while invalid, in turn making the state of execution undefined.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

CVE-2025-58143 is a race condition vulnerability in the Xen hypervisor's viridian code. It occurs during the mapping of the reference TSC (Time Stamp Counter) page, where a guest virtual machine can cause Xen to free a memory page while that page is still present in the guest's physical to machine (p2m) page tables. This improper handling of guest memory pages can lead to instability or crashes.


How can this vulnerability impact me? :

This vulnerability can impact you by potentially causing the Xen hypervisor to free memory pages prematurely, which may lead to guest virtual machine crashes, denial of service, or other unpredictable behavior affecting system stability and reliability.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart