https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:13:39.503909+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-12580 bdu:2025-12580 2026-10-02T14:13:39.626974+00:00 bdu:2025-12580 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0771 certfr-2025-avi-0771 — De multiples vulnérabilités ont été découvertes dans Xen. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-02T14:13:39.627020+00:00 certfr-2025-avi-0771 https://cve.radiocsirt.org/vuln/euvd-2026-259942 EUVD-2026-259942 2026-10-02T14:13:39.627045+00:00 EUVD-2026-259942 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27466 fkie_cve-2025-27466 2026-10-02T14:13:39.627063+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

There are multiple issues related to the handling and accessing of guest memory pages in the viridian code:

1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466.

2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142.

3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.

 https://cve.radiocsirt.org/vuln/ghsa-wx7g-7g56-c87j GHSA-wx7g-7g56-c87j 2026-10-02T14:13:39.627110+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

There are multiple issues related to the handling and accessing of guest memory pages in the viridian code:

1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466.

2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142.

3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15547-1 openSUSE-SU-2025:15547-1 — xen-4.20.1_04-1.1 on GA media 2026-10-02T14:13:39.627142+00:00

xen-4.20.1_04-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2025:3797-1 SUSE-SU-2025:3797-1 — Security update for xen 2026-10-02T14:13:39.627169+00:00

Security update for xen

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-27466 UBUNTU-CVE-2025-27466 2026-10-02T14:13:39.627193+00:00

Affected: Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:25.10: xen, Ubuntu:26.04:LTS: xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in the viridian code: 1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466. 2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142. 3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2007 WID-SEC-W-2025-2007 — Xen: Mehrere Schwachstellen 2026-10-02T14:13:39.627259+00:00

Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzenEin Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Informationen offenzulegen oder Berechtigungen zu erweitern.