CVE-2025-58143

A race condition exists in Xen’s viridian implementation during mapping of the reference TSC page. A malicious x86 HVM guest with the referencetsc viridian extension enabled could exploit this flaw to cause Xen to free a page while it is still present in the guest physical-to-machine p2m mappings...