CVE-2025-1713

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-1713
When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://xenbits.xenproject.org/xsa/advisory-467.html Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2025/02/27/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/02/27/3 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2025/02/28/1 Mailing List Third Party Advisory
http://xenbits.xen.org/xsa/advisory-467.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*
History

13 Jan 2026, 22:16

Type Values Removed Values Added
References () https://xenbits.xenproject.org/xsa/advisory-467.html - () https://xenbits.xenproject.org/xsa/advisory-467.html - Patch, Vendor Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/27/1 - () http://www.openwall.com/lists/oss-security/2025/02/27/1 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/27/3 - () http://www.openwall.com/lists/oss-security/2025/02/27/3 - Mailing List, Third Party Advisory
References () http://www.openwall.com/lists/oss-security/2025/02/28/1 - () http://www.openwall.com/lists/oss-security/2025/02/28/1 - Mailing List, Third Party Advisory
References () http://xenbits.xen.org/xsa/advisory-467.html - () http://xenbits.xen.org/xsa/advisory-467.html - Patch, Vendor Advisory
Summary
  • (es) Al configurar la reasignación de interrupciones para dispositivos PCI(-X) antiguos, incluidos los puentes PCI(-X), se requiere una búsqueda del puente ascendente. Esta búsqueda, que implica la adquisición de un bloqueo, se realiza en un contexto donde la adquisición de dicho bloqueo no es segura. Esto puede provocar un interbloqueo.
First Time Xen
Xen xen
CPE cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*

17 Jul 2025, 15:15

Type Values Removed Values Added
CWE CWE-833
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

17 Jul 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-17 14:15

Updated : 2026-01-13 22:16

NVD link : CVE-2025-1713

Mitre link : CVE-2025-1713

CVE.ORG link : CVE-2025-1713

JSON object : View

Products Affected

xen

  • xen
CWE
CWE-833

Deadlock