PT-2025-25821

CVE-2025-38046

·

Published

2025-06-18

·

Updated

2026-09-11

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue arises from compatibility problems between Linux and XenServer on Windows machines, where a platform device with ID 2 is used instead of the expected ID 1. This discrepancy causes Linux to crash due to missing initialization, specifically grant tables, when it detects Xen but cannot find the expected Xen platform device. The problem is identified by a crash in the gnttab expand function.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
CLSA-2025-1757963029
CLSA-2026-1787307395
CLSA-2026-1788170774
CLSA-2026-1788259625
CLSA-2026-1789141176
Found an issue in the description? Have something to add? Feel free to write us 👾