CVE-2023-52994

Summary (CVE-2023-52994): In the Linux kernel, suspending a system under Xen PV could dereference NULL due to a missed code path in acpi_get_wakeup_address, caused by the commit that skipped realmode init for Xen PV guests. The fix adds an optional ACPI callback to skip setting the wakeup address...

CVE-2023-52994

In the Linux kernel, the following vulnerability has been resolved: acpi: Fix suspend with Xen PV Commit f1e525009493 "x86/boot: Skip realmode init code when running as Xen PV guest" missed one code path accessing realmodeheader, leading to dereferencing NULL when suspending the system under Xen:...

Amazon Linux 2 : kernel (ALAS-2025-2790)

The version of kernel installed on the remote host is prior to 4.14.290-217.505. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2790 advisory. An out-of-bounds write flaw was found in the Linux kernel's framebuffer-based console driver functionality in the...

CVE-2023-52994: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: acpi: Fix suspend with Xen PV Commit f1e525009493 "x86/boot: Skip realmode init code when running as Xen PV guest" missed one code path accessing realmodeheader, leading to dereferencing NULL when suspending the system under Xen:...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from a null pointer dereference that occurs when the system hangs in the Xen PV environment...

Important: kernel

Issue Overview: An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flushtoldisc function. This flaw allows a local user...

Amazon Linux 2 : kernel (ALASKERNEL-5.15-2025-068)

The version of kernel installed on the remote host is prior to 5.15.57-29.131. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2025-068 advisory. A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong...

Fedora: Security Advisory (FEDORA-2025-20bd6d94b9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: xen-4.18.4-2.fc40

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 42 Update: xen-4.19.1-7.fc42

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Fedora 40 : xen (2025-20bd6d94b9)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-20bd6d94b9 advisory. deadlock potential with VT-d and legacy PCI device pass-through XSA-467, CVE-2025-1713 Tenable has extracted the preceding description block directly from th...

Linux Distros Unpatched Vulnerability : CVE-2014-9066

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial o...

PT-2025-14294

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where a vulnerability has been resolved by using rdmsr safe in amd get mmconfig range. This change is necessary because Xen does not offer MSR...

xen-4.20.0_08-4.1 on GA media (moderate)

xen-4.20.008-4.1 on GA media Announcement ID: openSUSE-SU-2025:14860-1 Rating: moderate Cross-References: CVE-2025-1713 CVSS scores: CVE-2025-1713 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-1713 SUSE : 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H...

Linux Distros Unpatched Vulnerability : CVE-2024-53240

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been...

OPENSUSE-SU-2025:14860-1 xen-4.20.0_08-4.1 on GA media

These are all security issues fixed in the xen-4.20.008-4.1 package on the GA media of openSUSE Tumbleweed...

PT-2025-9907

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue concerns a vulnerability related to AMD CPU microcode signature verification. A stopgap mitigation involves performing extra checks on microcode load on affected CPU families,...

Important: kernel

Issue Overview: A flaw was found in hw. Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type, potentially leading to information disclosure. CVE-2022-23825 Non-transparent sharing of return predictor targets between contexts in some IntelR Processors may...

Important: kernel

Issue Overview: An out-of-bounds write flaw was found in the Linux kernels framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

Linux Distros Unpatched Vulnerability : CVE-2022-49101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: xen: delay xenhvminittimeops if kdump is boot on vcpu=32 The schedclock can be used very ear...