Threats tagged 'ghsa-j9v5-p5pj-rmp7'

This record describes two related vulnerabilities involving the mapping of pages belonging to other domains. CVE-2025-58144 involves a NULL pointer dereference due to an incorrect assertion, which can cause a crash in release builds. CVE-2025-58145 involves a race condition where a lock is not held until a page reference is obtained, allowing the page's type or ownership to change and potentially violating domain boundaries. These issues affect memory management and domain isolation.