Beveiligingsadvies

CVE-2025-58150

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-28 15:33:17
Laatst bijgewerkt 2026-01-28 16:46:04
Toegewezen door XEN
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.