SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:4641-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4641-1 advisory. Security issues fixed: - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: doub...

CVE-2026-102700 gnttab: cache-flush handling may cause page reference leak

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-102700

The Xen hypervisor is affected by a vulnerability in gnttab where the GNTTAB_cache_flush function fails to properly drop a page reference during certain error paths. This specifically occurs when the specified page is owned by special system domains, such as DOM_IO or DOM_COW . The issue stems fr...

Security update for xen

This update for xen fixes the following issues: CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. CVE-2026-102700: gntta...

SUSE-SU-2026:4642-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race bsc1283322. - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. - CVE-2026-10270...

Security update for xen

This update for xen fixes the following issues: Security issues fixed: CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323...

PT-2026-111645

With its original introduction, GNTTAB cache flush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page ...

GSD-2022-1005710 xen/grants: prevent integer overflow in gnttab_dma_alloc_pages()

xen/grants: prevent integer overflow in gnttabdmaallocpages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.142 by commit...

GSD-2022-1000937 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.306 by commit...

GSD-2022-1000895 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.234 by commit...

GSD-2022-1000870 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.184 by commit...

GSD-2022-1000823 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.105 by commit...

GSD-2022-1000757 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.28 by commit...

GSD-2022-1000756 xen/netfront: react properly to failing gnttab_end_foreign_access_ref()

xen/netfront: react properly to failing gnttabendforeignaccessref This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.28 by commit...

GSD-2022-1000686 xen/gnttab: fix gnttab_end_foreign_access() without page specified

xen/gnttab: fix gnttabendforeignaccess without page specified This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.14 by commit...

PT-2022-29031

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.28 Description The issue is related to the xen/gnttab component, specifically with the function gnttab end foreign access when no page is specified. The actual impact and attack plausibility have not yet be...

PT-2022-29169

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.234 Description The issue is related to the xen/gnttab component, specifically with the function gnttab end foreign access when no page is specified. The actual impact and attack plausibility have not yet...

PT-2022-29191

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.271 Description The issue is related to the xen/gnttab component, specifically with the function gnttab end foreign access when no page is specified. The actual impact and attack plausibility have not yet...

PT-2022-28960

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.14 Description The issue is related to the xen/gnttab component, specifically the gnttab end foreign access function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29097

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.105 Description The issue is related to the xen/gnttab component, specifically with the function gnttab end foreign access when no page is specified. The actual impact and attack plausibility have not yet...