The vulnerability of the vpmask_set() function in the cross-platform hypervisor of the Linux operating system allows a attacker to increase their privileges.

The vulnerability of the vpmaskset function in the cross-platform hypervisor of the Linux operating system is related to an error in boundary checking during the processing of the HVVPSET format. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20251124-08

A vulnerability in the cross-platform Xen hypervisor of the Linux operating system kernel is related to a bug in the bounds checking in the vpmaskset function when processing a sparse HVVPSET format. Exploitation of the of the vulnerability could allow an attacker acting remotely to escalate...

CVE-2025-58147: Out-of-bounds Read

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Some Viridian hypercalls can specify a mask of vCPU IDs as an input, in one of three formats. Xen has boundary checking bugs with all three formats, which can cause...