CVE-2025-58145
Gravedad CVSS v3.1:
ALTA
Tipo:
CWE-362
Ejecución concurrente utilizando recursos compartidos con una incorrecta sincronización (Condición de carrera)
Fecha de publicación:
11/09/2025
Última modificación:
11/09/2025
Descripción
*** Pendiente de traducción *** [This CNA information record relates to multiple CVEs; the<br />
text explains which aspects/vulnerabilities correspond to which CVE.]<br />
<br />
There are two issues related to the mapping of pages belonging to other<br />
domains: For one, an assertion is wrong there, where the case actually<br />
needs handling. A NULL pointer de-reference could result on a release<br />
build. This is CVE-2025-58144.<br />
<br />
And then the P2M lock isn&#39;t held until a page reference was actually<br />
obtained (or the attempt to do so has failed). Otherwise the page can<br />
not only change type, but even ownership in between, thus allowing<br />
domain boundaries to be violated. This is CVE-2025-58145.
Impacto
Puntuación base 3.x
7.50
Gravedad 3.x
ALTA