CVE-2025-58150

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.18.5-r4

Description The issue involves shadow mode tracing code that utilizes per-CPU variables to streamline parameter passing. Certain variables are written to using guest-controlled data of a size determined by the guest. This size can exceed the variable's capacity, and the necessary bounds checking is absent. This can lead to memory corruption if a malicious guest exploits this flaw. The issue requires guest compromise to be exploited.

Recommendations Update to version 4.18.5-r4.