CVE-2025-58149 Incorrect removal of permissions on PCI device unplug

When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain. For PV domains the permission leak allo...

CVE-2025-58149

The Xen hypervisor is affected by a vulnerability where the libxl detach logic fails to remove access permissions for 64-bit memory BARs when PCI devices are detached. This allows a domain to retain access to memory from a device no longer assigned to it. In PV domains , this leak allows the doma...

kernel: Revert "sched/fair: Make sure to try to detach at least one movable task"

A flaw was found in the Linux kernel's task scheduler. A local user can cause a Denial of Service DoS by assigning a large number of tasks to a single processor core. When the kernel attempts to balance workloads across cores, the scheduler iterates through all pinned tasks without enforcing norm...