https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:39:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-12598 bdu:2025-12598 https://cve.radiocsirt.org/vuln/bdu:2025-12598 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0771 certfr-2025-avi-0771 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0771 https://cve.radiocsirt.org/vuln/cnvd-2025-21354 cnvd-2025-21354 https://cve.radiocsirt.org/vuln/cnvd-2025-21354 https://cve.radiocsirt.org/vuln/euvd-2026-260046 EUVD-2026-260046 https://cve.radiocsirt.org/vuln/euvd-2026-260046 https://cve.radiocsirt.org/vuln/fkie_cve-2025-58145 <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]</p> <p>There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.</p> <p>And then the P2M lock isn&#39;t held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]</p> <p>There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.</p> <p>And then the P2M lock isn&#39;t held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-58145 https://cve.radiocsirt.org/vuln/ghsa-j9v5-p5pj-rmp7 <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]</p> <p>There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.</p> <p>And then the P2M lock isn&#39;t held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]</p> <p>There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.</p> <p>And then the P2M lock isn&#39;t held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.</p> https://cve.radiocsirt.org/vuln/ghsa-j9v5-p5pj-rmp7 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-58145 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:25.10: xen, Ubuntu:26.04:LTS: xen</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144. And then the P2M lock isn&#39;t held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:25.10: xen, Ubuntu:26.04:LTS: xen</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144. And then the P2M lock isn&#39;t held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-58145 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2007 <p>Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzenEin Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Informationen offenzulegen oder Berechtigungen zu erweitern.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzenEin Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um einen Denial-of-Service-Angriff durchzuführen, Informationen offenzulegen oder Berechtigungen zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2007