Deadlock in Xen - CVE-2025-1713

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU105104

Deadlock in Xen - CVE-2025-1713

Published: February 27, 2025


Vulnerability identifier: #VU105104
CSH Severity: Medium
CVSS v4: 8.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H]
CVE-ID: CVE-2025-1713
CWE-ID: CWE-833
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a malicious guest to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking when handling legacy PCI devices pass-through. A malicious low-privileged guest can crash the entire host. 

Successful exploitation of the vulnerability requires Intel IOMMU hardware (VT-d).


Affected software

Xen
Debian Linux
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Server Applications Module
Basesystem Module
openSUSE Leap
Fedora
SmartFabric Manager
APEX Cloud Platform for Red Hat OpenShift
xen-libs-64bit-debuginfo
xen-doc-html
xen-tools-debuginfo
xen
xen-tools
xen-libs-32bit-debuginfo
xen-libs-32bit
xen-libs
xen-tools-domU-debuginfo
xen-tools-domU
xen-debugsource
xen-devel
xen-libs-debuginfo
xen-tools-xendomains-wait-disk
xen-libs-64bit
xen (Debian package)

How to mitigate CVE-2025-1713

Install updates from vendor's website.

SmartFabric Manager - update to 1.3.0
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
xen-libs-64bit-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-doc-html - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-tools-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-tools - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-libs-32bit - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-libs - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-tools-domU-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-tools-domU - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-debugsource - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-devel - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-libs-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-tools-xendomains-wait-disk - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen-libs-64bit - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_06-150600.3.20.1
xen (Debian package) - addressed in versions 4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1
xen - addressed in versions 4.18.4-2.fc40, 4.19.1-5.fc41, 4.19.1-7.fc42

External References

Related Security Bulletins