CVE-2025-58142 Mutiple vulnerabilities in the Viridian interface

Critical 9.8 Published 11 Sep 2025 Updated 4 Nov 2025

A guest VM can trigger a NULL pointer dereference in the Xen hypervisor's Viridian interface, causing a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2025-58142?

CVE-2025-58142 is a critical vulnerability in Xen Xen, published on 11 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

There are multiple issues related to the handling and accessing of guest memory pages in the viridian code:

1. A NULL pointer dereference in the updating of the reference TSC area. This is CVE-2025-27466.

2. A NULL pointer dereference by assuming the SIM page is mapped when a synthetic timer message has to be delivered. This is CVE-2025-58142.

3. A race in the mapping of the reference TSC page, where a guest can get Xen to free a page while still present in the guest physical to machine (p2m) page tables. This is CVE-2025-58143.

Weakness: CWE-395

Which versions are affected by CVE-2025-58142?

It affects 1 product.

Products include Xen Xen.

How do I fix CVE-2025-58142?

Apply the vendor's patch.

Is CVE-2025-58142 being exploited?

There is no known exploitation of CVE-2025-58142 in the wild and no public exploit code.

All Xen Xen vulnerabilities

Sources

Also known as ALPINE-CVE-2025-58142, DEBIAN-CVE-2025-58142, GHSA-mfp8-jpmh-x36j, UBUNTU-CVE-2025-58142.