File _patchinfo of Package patchinfo.40469
<patchinfo incident="40469">
<issue tracker="bnc" id="1248807">VUL-0: CVE-2025-27466,CVE-2025-58142,CVE-2025-58143: xen: Mutiple vulnerabilities in the Viridian interface (XSA-472)</issue>
<issue tracker="cve" id="2025-58143"/>
<issue tracker="cve" id="2025-27466"/>
<issue tracker="cve" id="2025-58142"/>
<packager>charlesa</packager>
<rating>important</rating>
<category>security</category>
<reboot_needed/>
<summary>Security update for xen</summary>
<description>This update for xen fixes the following issues:
- CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807).
- CVE-2025-58142: NULL pointer dereference in the Viridian interface due to assumption that the SIM page is mapped when
a synthetic timer message has to be delivered (bsc#1248807).
- CVE-2025-58143: information leak and reference counter underflow in the Viridian interface due to race in the mapping
of the reference TSC page (bsc#1248807).
</description>
</patchinfo>