Fedora: Security Advisory (FEDORA-2026-844012d662)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xen-4.21.0_04-1.1 on GA media (moderate)

xen-4.21.004-1.1 on GA media Announcement ID: openSUSE-SU-2026:10118-1 Rating: moderate Cross-References: CVE-2025-58150 CVE-2026-23553 CVSS scores: CVE-2025-58150 SUSE : 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVE-2025-58150 SUSE : 4.8...

CVE-2025-58150

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

SUSE CVE-2025-58150

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing...

Security update for xen

This update for xen fixes the following issues: CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing XSA-477 bsc1256745 CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation XSA-479 bsc1256747 Special Instructions and Notes: Please reboot the system after installing this update...

CVE-2025-58150

creationtimestamp| type| source ---|---|--- 2026-01-27 11:03:01+00:00| seen| https://seclists.org/oss-sec/2026/q1/117 2026-01-27 12:42:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mdfru2qhmm2b 2026-01-27 13:41:11+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2025-58150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled dat...

PT-2025-54614

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The shadow mode tracing code utilizes per-CPU variables to streamline data handling, avoiding extensive parameter passing. Certain variables are written to using data controlled by the guest, wit...