SUSE-SU-2026:4089-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839...

Security update for xen

This update for xen fixes the following issues: CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841. Special...

SUSE-SU-2026:4088-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841...

Security update for xen

This update for xen fixes the following issues: CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841. Special...

SUSE-SU-2026:4087-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing bsc1276841...

EUVD-2026-72721

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603 Unconditionally do TLB flushing ahead of page scrubbing

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603 Unconditionally do TLB flushing ahead of page scrubbing

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79602 x86: improper handling of HVM emulation return codes

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79602

A flaw exists in the Xen hypervisor where a malicious guest operating system with an assigned PCI device featuring a Base Address Register (BAR) mapped to the I/O port space can trigger an internal BUG() . This vulnerability is caused by the improper handling of HVM emulation return codes . The i...

CVE-2026-62437 x86: DMs may cause mem leak by IRQ binding

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

CVE-2026-62437

A flaw in Xen allows a guest virtual machine's device model (DM) to re-establish interrupt request (IRQ) tracking structures after the initial cleanup process during guest termination. This causes certain structures to remain unallocated, resulting in a memory leak . A local attacker with control...

CVE-2026-62437 x86: DMs may cause mem leak by IRQ binding

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

CVE-2026-79603

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

UBUNTU-CVE-2026-79602

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

x86: improper handling of HVM emulation return codes

ISSUE DESCRIPTION A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. IMPACT Passing through a PCI device with at least one BAR in IO address space to unprivileged HVM guests can result in a Denial of Service DoS affecting the entire host...

CVE-2026-79603: Improper Control of a Resource Through its Lifetime

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...

CVE-2026-79603: Improper Control of a Resource Through its Lifetime

x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen if needed when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbe...