Critical Vulnerability in Xen Package: NULL Pointer Dereference and Race Conditions
Summary
ALPINE-CVE-2025-58142: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] There are multiple issues related to the handling and accessing of guest memory pages in th... Affects xen versions < 4.18.5-r2. Fixed in 4.18.5-r2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Xen package is a widely used open-source hypervisor that allows multiple operating systems to run concurrently on a single physical machine. It is known for its performance, scalability, and security features, making it a popular choice for cloud computing and virtualization. However, recent vulnerabilities have been identified in the handling of guest memory pages within the Viridian code, which could lead to severe security issues.
Vulnerability Detail
The vulnerability arises from multiple issues in the Xen package related to the handling and accessing of guest memory pages. Specifically, it includes a NULL pointer dereference when updating the reference TSC area (CVE-2025-27466), another NULL pointer dereference when assuming the SIM page is mapped during synthetic timer message delivery (CVE-2025-58142), and a race condition in mapping the reference TSC page, allowing a guest to free a page still present in the guest physical to machine (p2m) page tables (CVE-2025-58143). These vulnerabilities can lead to system crashes, denial of service, or unauthorized access to sensitive data.
How To Fix
Minimum fixed version
4.18.5-r2
This is the first release that contains the fix.
sudo apk add --upgrade xenTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users may consider disabling specific features that rely on the affected components until the package can be updated. However, this is not a long-term solution and should be followed by an update as soon as possible.
Conclusion
In summary, the Xen package has critical vulnerabilities related to NULL pointer dereferences and race conditions that can severely impact system security. It is essential to update to the latest patched versions to mitigate these risks and ensure the stability and security of your systems.
See every vulnerability recorded for xen →
FAQ
The Xen package is an open-source hypervisor that enables multiple operating systems to run on a single physical machine, providing virtualization capabilities.
The vulnerabilities can lead to system crashes, denial of service, or unauthorized access to sensitive data, posing significant security risks.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file. Visit Vulert Scanner to check your application without any signup.
If immediate updates are not possible, consider disabling features that rely on the affected components as a temporary workaround.
Detailed information about the vulnerabilities can be found in the CVE records, specifically CVE-2025-58142, CVE-2025-27466, and CVE-2025-58143.
References
Related vulnerabilities
Recent vulnerabilities recorded for xen.
