CVE-2025-58145

CVE-2025-58145 concerns the Xen hypervisor. The issue stems from the P2M mapping: the P2M lock is not held until a page reference is obtained, allowing a page to change type or ownership between steps and enabling domain-boundary violations. A NULL-pointer dereference on release builds is also no...

CVE-2025-58144 Arm issues with page refcounting

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...