CVE-2025-1713
HIGHXen >=4.0.0 - Deadlock via Legacy PCI Device Interrupt Remapping
Title source: llmDescription
When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock.
References (5)
Core 5
Core References
Patch, Vendor Advisory
https://xenbits.xenproject.org/xsa/advisory-467.html
Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/02/27/1
Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/02/27/3
Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/02/28/1
Patch, Vendor Advisory
http://xenbits.xen.org/xsa/advisory-467.html
Scores
CVSS v3
7.5
EPSS
0.0023
EPSS Percentile
46.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-833
Status
published
Products (1)
xen/xen
4.0.0
Published
Jul 17, 2025
Tracked Since
Feb 18, 2026