https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:36:54 +0000 https://cve.radiocsirt.org/vuln/cve-2025-58149 <p><strong>Affected:</strong> Xen</p> <p>When passing through PCI devices, the detach logic in libxl won&#39;t remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain.</p> <p>For PV domains the permission leak allows the domain itself to map the memory in the page-tables. For HVM it would require a compromised device model or stubdomain to map the leaked memory into the HVM domain p2m.</p> <p><strong>Affected:</strong> Xen</p> <p>When passing through PCI devices, the detach logic in libxl won&#39;t remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have access any 64bit memory BAR when such device is no longer assigned to the domain.</p> <p>For PV domains the permission leak allows the domain itself to map the memory in the page-tables. For HVM it would require a compromised device model or stubdomain to map the leaked memory into the HVM domain p2m.</p> https://cve.radiocsirt.org/vuln/cve-2025-58149