CVE-2025-58144: Arm issues with page refcounting
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]
There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144.
And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58144?
CVE-2025-58144 has been classified with a critical severity level due to the potential impact on system integrity and security.
How do I fix CVE-2025-58144?
To mitigate CVE-2025-58144, it is recommended to update the Xen Hypervisor to the latest version that addresses this vulnerability.
What are the risks associated with CVE-2025-58144?
The risks associated with CVE-2025-58144 include unauthorized access and the potential for exploitation of other domains mapped incorrectly.
Which software is affected by CVE-2025-58144?
CVE-2025-58144 primarily affects the Xen Hypervisor and similar components that handle domain page mappings.
Is there a workaround for CVE-2025-58144?
Currently, there are no publicly known workarounds for CVE-2025-58144, so applying patches is the recommended approach.