Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-58150

Опубликовано: 28 янв. 2026
Источник: nvd
CVSS3: 8.8
EPSS Низкий

Описание

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

EPSS

Процентиль: 1%
0.00012
Низкий

8.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
10 дней назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

CVSS3: 8.8
debian
10 дней назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumb ...

CVSS3: 8.8
github
10 дней назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

suse-cvrf
10 дней назад

Security update for xen

suse-cvrf
11 дней назад

Security update for xen

EPSS

Процентиль: 1%
0.00012
Низкий

8.8 High

CVSS3

Дефекты

CWE-787