CVE-2025-58143CWE-366

CVE-2025-58143

Critical · published September 11, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

🔥 A race condition in the mapping of the reference TSC page lets a guest trick Xen into freeing a page it still needs! ⚡ Think of it like a delivery driver who gets a call saying they shouldn’t come to the house anymore, but the homeowner still has their package on the porch. If the driver acts on that call and takes the package away, the homeowner is left empty-handed! An attacker could exploit this vulnerability to create instability in the guest system, potentially leading to crashes or data loss. This could result in a complete denial of service for the affected guest, making it a staggering threat for anything that relies on stable virtualization. We’re talking about critical systems that could be left hanging!

Put simply

Think of it like a delivery driver who gets a call saying they shouldn’t come to the house anymore, but the homeowner still has their package on the porch. If the driver acts on that call and takes the package away, the homeowner is left empty-handed! This vulnerability arises from a race condition in the handling of memory pages in the viridian code, specifically allowing a guest to request that Xen free a page while it is still listed in the guest physical to machine (p2m) page tables. This wrongfully assumes the page can be freed without consequences.

What to do

An attacker could exploit this vulnerability to create instability in the guest system, potentially leading to crashes or data loss. This could result in a complete denial of service for the affected guest, making it a staggering threat for anything that relies on stable virtualization. We’re talking about critical systems that could be left hanging! To remediate this, ensure that you update your virtualization environment to the latest version where this issue is patched. Review your system configurations and memory management practices to minimize race conditions. Regularly check for updates to maintain system integrity. You can tackle this! Stay updated, and you'll have your systems secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.6th percentile
Weakness
CWE-366 · Race Condition within a Thread
Published
2025-09-11T18:15Z
Affected products (1)
ProductVersionsFixed in
xen/xen≥ 4.13.0, < 4.17.04.17.0
References (3)
EPSS history
Timeline
  • 11 SEP 14:05Z
    Mutiple vulnerabilities in the Viridian interface
    cvelistv5