Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2022-49035: media: s5pcec: limit msg.len to CECMAXMSGSIZE bsc1215304. CVE-2024-53146: NFSD: Prevent a potential integer overflow bsc1234853. CVE-2024-53156: wif...

CLSA-2025-1737468474 kernel: Fix of 4 CVEs

media: edia: dvbdev: fix a use-after-free CVE-2024-27043 - btrfs: dev-replace: properly validate device names CVE-2024-26791 - KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory CVE-2024-50115 - net/sched: stop qdisctreereducebacklog on TCHROOT CVE-2024-53057 - ipc/sem.c: bugfix for...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-41087: Fix double free on error bsc1228466. CVE-2024-53095: smb: client: Fix use-after-free of network namespace bsc1233642. CVE-2024-53146: NFSD: Prevent a...

openSUSE Security Advisory (SUSE-SU-2025:0142-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2025:0142-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:0142-1 advisory. - CVE-2024-53241: Xen hypercall page unsafe against speculative attacks bsc1234282. Bug fixes: - Update t...

Security update for xen

This update for xen fixes the following issues: CVE-2024-53241: Xen hypercall page unsafe against speculative attacks bsc1234282. Bug fixes: Update to Xen 4.18.4 security bug fix release bsc1027519 x86: Prefer ACPI reboot over UEFI ResetSystem run time service call No other changes mentioned in...

SUSE-SU-2025:0142-1 Security update for xen

This update for xen fixes the following issues: - CVE-2024-53241: Xen hypercall page unsafe against speculative attacks bsc1234282. Bug fixes: - Update to Xen 4.18.4 security bug fix release bsc1027519 x86: Prefer ACPI reboot over UEFI ResetSystem run time service call No other changes mentioned ...

Using Veeam Agents with Xen Orchestra (Vates XCP-NG and XenServer)

Purpose This article documents how to use Veeam Agent for Microsoft Windows and Veeam Agent for Linux , managed by Veeam Backup & Replication, to protect virtual machines in XenServer and XCP-NG environments that are managed by Xen Orchestra. While these hypervisors are not directly supported for...

[SECURITY] Fedora 41 Update: xen-4.19.1-3.fc41

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Fedora 41 : xen (2025-933a9a977e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-933a9a977e advisory. work around debugedit bug to fix aarch64 builds xen-hypervisor %post doesn't load all needed grub2 modules update to xen-4.19.1 which includes...

USN-7196-1 linux-azure, linux-azure-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...

USN-7154-2 linux-hwe-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...

Internet Bug Bounty: Deadlock in x86 HVM standard VGA handling

The Xen hypervisor contained a vulnerability in its handling of standard VGA memory accesses for HVM guests. The locking mechanism used had an unusual discipline that could lead to a deadlock when emulating an instruction with two memory accesses to VGA memory. The vulnerability was acknowledged ...

PT-2025-43033

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description Certain Viridian hypercalls can be specified in a way that leads to a security issue. Details are available in a linked source. Recommendations At the moment, there is no information about a newe...

PT-2025-43034

Name of the Vulnerable Software and Affected Versions xen affected versions not specified Description Certain hypercalls within xen can be specified in a manner that presents a security concern. The description does not provide details about the nature of the issue or any specific technical detai...

PT-2025-9046

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue is related to a potential deadlock when using VT-d and legacy PCI device pass-through, which can cause a Denial of Service DoS affecting the entire host. This occurs when certain kinds ...

PT-2025-27564

Name of the Vulnerable Software and Affected Versions: xen affected versions not specified Description: The issue allows an unprivileged guest to cause a hypervisor crash, resulting in a Denial of Service DoS of the entire host. This is due to incorrect stubs exception handling for flags recovery...

PT-2025-54614

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.18.5-r4 Description The issue involves shadow mode tracing code that utilizes per-CPU variables to streamline parameter passing. Certain variables are written to using guest-controlled data of a size determined by the...

SUSE CVE-2024-56704

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...

AZL-55457 CVE-2024-56704 affecting package kernel for versions less than 5.15.176.3-1

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID during IRQ release. Dominique: remove confusing variable reset to 0...