Xen: x86 DMs May Cause Mem Leak by IRQ Binding (XSA-509)

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

PT-2026-90155

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1 Description An issue exists in the platform/x86 ISST component where a missing NULL check for sst inst could lead to instability during failed socket loading. The fix involves implementing a check for...

The vulnerability of the avic_hardware_setup() function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the avichardwaresetup function in the arch/x86/kvm/svm/avic.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow an...

The vulnerability of the sev_dbg_crypt() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sevdbgcrypt function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the intel_pmu_enable_event() function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, allows a hacker to trigger a service failure.

The vulnerability of the intelpmuenableevent function in the arch/x86/events/intel/core.c module, which is part of the Linux operating system’s x86 kernel support, relates to the use of an incomplete blacklist during the processing of input data. Exploiting this vulnerability could allow a...

The vulnerability of the uniwill_init() function in the drivers/platform/x86/uniwill/uniwill-acpi.c driver for X86 processors in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the uniwillinit function in the drivers/platform/x86/uniwill/uniwill-acp.c driver for X86 devices in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...

Joern 4.0.624

Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...

SUSE CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

2026-09 Cumulative Update for Windows 10 Version 1607 for x86-based Systems (KB5123099)

2026-09 Cumulative Update for Windows 10 Version 1607 for x86-based Systems KB5123099...

2026-09 .NET 8.0.31 Security Update for x86 Client (KB5126104)

2026-09 .NET 8.0.31 Security Update for x86 Client KB5126104...

2026-09 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5122878)

2026-09 Cumulative Update for Windows 10 Version 21H2 for x86-based Systems KB5122878...

2026-09 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems (KB5122878)

2026-09 Cumulative Update for Windows 10 Version 22H2 for x86-based Systems KB5122878...

2026-09 .NET 10.0.12 Security Update for x86 Client (KB5126106)

2026-09 .NET 10.0.12 Security Update for x86 Client KB5126106...

2026-09 .NET 9.0.20 Security Update for x86 Client (KB5126105)

2026-09 .NET 9.0.20 Security Update for x86 Client KB5126105...

2026-09 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems (KB5122878)

2026-09 Dynamic Cumulative Update for Windows 10 Version 21H2 for x86-based Systems KB5122878...

2026-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5122876)

2026-09 Cumulative Update for Windows 10 Version 1809 for x86-based Systems KB5122876...

ALPINE-CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

Security update for xen

This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...

Security update for xen

This update for xen fixes the following issues: CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. Special Instructions and Notes: Please reboot the system after installing this update. Patch...

SUSE-SU-2026:4089-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839...