---
id: "CVE-2025-62620"
page: "https://infrastack.ai/live/CVE-2025-62620"
kind: "vulnerability"
aliases: ["CVE-2025-62620"]
title: "Xen-style hypervisor ring buffer flaw lets privileged attacker corrupt guest memory"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["hypervisor", "infrastructure", "virtualization"]
not_affected_if: ["no-virtualization"]
published_at: "2026-11-10T22:17:46+00:00"
first_seen_at: "2026-11-10T22:27:23+00:00"
updated_at: "2026-11-10T22:30:33+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62620", "first_seen_at": "2026-11-10T22:27:23+00:00"}]
exploit_sources: []
---

# Xen-style hypervisor ring buffer flaw lets privileged attacker corrupt guest memory

Link for people: https://infrastack.ai/live/CVE-2025-62620 (this .md is for agents)

An attacker holding high privileges can get a ring buffer queue status page reclaimed, which can break the integrity of guest memory. The description does not name the affected product or versions.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T22:27:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-62620

## From the sources

Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring buffer queue status page, potentially resulting in loss of guest memory integrity.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_