Vulnerability · Published Sep 11, 2025 · Assigned by XEN
CVE-2025-58144Arm issues with page refcounting
High 7.5
In plain English
A high-severity null pointer dereference in Xen from Xen. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL pointer de-reference could result on a release build. This is CVE-2025-58144. And then the P2M lock isn't held until a page reference was actually obtained (or the attempt to do so has failed). Otherwise the page can not only change type, but even ownership in between, thus allowing domain boundaries to be violated. This is CVE-2025-58145.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine:v3.20 | xen | 4.18.5-r2 | ALPINE-CVE-2025-58144 |
| Alpine:v3.21 | xen | 4.19.3-r1 | ALPINE-CVE-2025-58144 |
| Alpine:v3.22 | xen | 4.20.1-r1 | ALPINE-CVE-2025-58144 |
| Alpine:v3.23 | xen | 4.20.1-r1 | ALPINE-CVE-2025-58144 |
| Alpine:v3.24 | xen | 4.20.1-r1 | ALPINE-CVE-2025-58144 |
| Debian:12 | xen | 4.17.5+72-g01140da4e8-1 | DSA-6068-1 |
| Debian:12 | xen | 4.17.5+72-g01140da4e8-1 | DEBIAN-CVE-2025-58144 |
| Debian:13 | xen | 4.20.2+7-g1badcf5035-0+deb13u1 | DEBIAN-CVE-2025-58144 |
| Debian:13 | xen | 4.20.2+7-g1badcf5035-0+deb13u1 | DSA-6068-1 |
| Debian:14 | xen | 4.20.2+7-g1badcf5035-1 | DEBIAN-CVE-2025-58144 |
| Ubuntu:22.04:LTS | xen | no fix listed | UBUNTU-CVE-2025-58144 |
| Ubuntu:24.04:LTS | xen | no fix listed | UBUNTU-CVE-2025-58144 |
| Ubuntu:25.10 | xen | no fix listed | UBUNTU-CVE-2025-58144 |
| Ubuntu:26.04:LTS | xen | no fix listed | UBUNTU-CVE-2025-58144 |
| Ubuntu:26.10 | xen | no fix listed | UBUNTU-CVE-2025-58144 |
Affected products (as reported)
Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H