{"action":"Upgrade xen to 4.14.0-r1 or later.","affected":[{"fixed":"4.14.0-r1","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.16","exploited":false,"fixed_versions":["4.14.0-r1"],"id":"tcs_01M5NCEBX5DN04RR7MDJVBV264","modified_at":"2026-09-11T10:17:51.410821086Z","published_at":"2020-09-23T21:15:12.150Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2020-25595","https://security.alpinelinux.org/vuln/CVE-2020-25595"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2020-25595#Alpine:v3.16/xen","url":"https://osv.dev/vulnerability/ALPINE-CVE-2020-25595"}],"summary":"An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitized values read back fr"}