https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T01:23:27.328689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-12598 bdu:2025-12598 2026-10-03T01:23:27.417481+00:00 bdu:2025-12598 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0771 certfr-2025-avi-0771 — De multiples vulnérabilités ont été découvertes dans Xen. Certaines d'entre elles permettent à un attaquant de provoque… 2026-10-03T01:23:27.417517+00:00 certfr-2025-avi-0771 https://cve.radiocsirt.org/vuln/cnvd-2025-21354 cnvd-2025-21354 2026-10-03T01:23:27.417537+00:00 cnvd-2025-21354 https://cve.radiocsirt.org/vuln/euvd-2026-260046 EUVD-2026-260046 2026-10-03T01:23:27.417549+00:00 EUVD-2026-260046 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58145 fkie_cve-2025-58145 2026-10-03T01:23:27.417560+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.

And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.

 https://cve.radiocsirt.org/vuln/ghsa-j9v5-p5pj-rmp7 GHSA-j9v5-p5pj-rmp7 2026-10-03T01:23:27.417632+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.

And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-58145 UBUNTU-CVE-2025-58145 2026-10-03T01:23:27.417653+00:00

Affected: Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:25.10: xen, Ubuntu:26.04:LTS: xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144. And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2007 WID-SEC-W-2025-2007 — Xen: Mehrere Schwachstellen 2026-10-03T01:23:27.417686+00:00

Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzenEin Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Informationen offenzulegen oder Berechtigungen zu erweitern.