CVE-2025-1713 | BDVDB-2026-286522 Detail
XenXen
Description#
When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock.
Impact#
The passing through of certain kinds of devices to an unprivileged guest can result in a Denial of Service (DoS) affecting the entire host. Note: Normal usage of such devices by a privileged domain can also trigger the issue. In such a scenario, the deadlock is not considered a security issue, but just a plain bug.
Weaknesses#
- CWE-833 Deadlock
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.