CVE-2025-27465

published 2025-07-16

CVE-2025-27465: Certain instructions need intercepting and emulating by Xen. In some cases Xen emulates the instruction by replaying it, using an executable stub. Some…

Priority P4 19 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C N I N A L

Certain instructions need intercepting and emulating by Xen. In some
cases Xen emulates the instruction by replaying it, using an executable
stub. Some instructions may raise an exception, which is supposed to be
handled gracefully. Certain replayed instructions have additional logic
to set up and recover the changes to the arithmetic flags.

For replayed instructions where the flags recovery logic is used, the
metadata for exception handling was incorrect, preventing Xen from
handling the the exception gracefully, treating it as fatal instead.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
debian	xen	< xen 4.17.5+72-g01140da4e8-1 (bookworm)	xen 4.17.5+72-g01140da4e8-1 (bookworm)
xen	xen	>= 0 < 4.18.5-r1	4.18.5-r1
xen	xen	>= 0 < 4.18.5-r1	4.18.5-r1
xen	xen	>= 0 < 4.19.2-r2	4.19.2-r2
xen	xen	>= 0 < 4.20.1-r0	4.20.1-r0
xen	xen	>= 0 < 4.20.1-r0	4.20.1-r0
xen	xen	>= 0 < 4.17.5+72-g01140da4e8-1	4.17.5+72-g01140da4e8-1
xen	xen	>= 0 < 4.20.2+7-g1badcf5035-0+deb13u1	4.20.2+7-g1badcf5035-0+deb13u1
xen	xen	>= 0 < 4.20.2+7-g1badcf5035-1	4.20.2+7-g1badcf5035-1
xen	xen	>= 4.9.0	—

CVSS provenance

nvd v3.1 4.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

osv 4.3 MEDIUM

vendor_debian 4.3 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-755