CVE-2025-58144 Arm issues with page refcounting

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

CVE-2025-58145

The Xen hypervisor is vulnerable to a security issue where the P2M lock is not held until a page reference is actually obtained or the attempt to obtain it fails. This synchronization flaw allows a page to change its type or ownership during the process, which can lead to the violation of domain ...