varstored vulnerabilities

1 known vulnerability in varstored from Xen. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  varstored: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2025-58151Jul 9, 2026Xen

  varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issue