Logo
›
›vulnerability›CVE-2025-1713
Name
CVE-2025-1713
Source
NVD ( link)Debian ( link)
Description
When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock.
CWEs
CWE-833
Published Date
Updated Date
Workaround
-
Advisories
https://xenbits.xenproject.org/xsa/advisory-467.htmlPatch
http://www.openwall.com/lists/oss-security/2025/02/27/1Mailing List
http://www.openwall.com/lists/oss-security/2025/02/27/3Mailing List
http://www.openwall.com/lists/oss-security/2025/02/28/1Mailing List
http://xenbits.xen.org/xsa/advisory-467.htmlPatch

Analysis#

Affected Component
Analysis
xen
Exploitable

Vulnerability Ratings#

7.5
CVSSv31
NaN
other

Others affected component#

Name
Project
Project Version
Version
Status
xen
buildroot
2025.02.x
4.14.6
Exploitable