Security update for xen

This update for xen fixes the following issues: Security issues fixed: CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing...

SUSE-SU-2026:5140-1 Security update for xen

This update for xen fixes the following issues: Security issues fixed: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation return codes bsc1276839. - CVE-2026-79603: unconditionally do TLB flushing ahead of page...

CVE-2026-102702

A flaw was found in Xen. A guest domain with read-only access to shared memory can cause memory corruption in another virtual machine. The hypervisor fails to restrict invalidate-without-clean cache operations on read-only grant table mappings. An attacker in a guest virtual machine can exploit...

CVE-2026-102700

A flaw was found in Xen. An error handling issue in the grant table cache flush operation fails to properly release memory page references when handling pages owned by special system domains. A guest domain can exploit this flaw to cause a reference leak, potentially leading to resource exhaustio...

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:4942-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4942-1 advisory. - CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround bsc1283317. - CVE-2026-79609: x86: XPTI may break o...

CLEANSTART-2024-RW90505 long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains

Security vulnerability affects the xen package. long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains...

CLEANSTART-2024-VY29937 grant-table feature in Xen through 4

Security vulnerability affects the xen package. The grant-table feature in Xen through 4...

CLEANSTART-2024-RT61814 grant-table feature in Xen through 4

Security vulnerability affects the xen package. The grant-table feature in Xen through 4...

CLEANSTART-2024-ED99895 grant-table feature in Xen through 4

Security vulnerability affects the xen package. The grant-table feature in Xen through 4...

CLEANSTART-2024-XC52543 grant-table feature in Xen through 4

Security vulnerability affects the xen package. The grant-table feature in Xen through 4...

Security update for xen

This update for xen fixes the following issues: CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround bsc1283317. CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with...

SUSE-SU-2026:4942-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround bsc1283317. - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race bsc1283322. - CVE-2026-79611: VMX: VMentry...

CVE-2026-79610

A flaw was found in Xen. When a guest virtual machine repeatedly changes grant table configurations, the hypervisor frees and reallocates status memory pages, rendering previously calculated pointers invalid. A malicious guest can exploit these stale pointers to corrupt hypervisor memory,...

Citrix XenServer 8.4.x / 9.x Multiple Vulnerabilities (CTX697170)

The version of Citrix XenServer installed on the remote host is 8.4.x or 9.x. It is, therefore, affected by multiple vulnerabilities as referenced in the CTX697170 advisory: - A grant table race on a v2 - v1 - v2 version change may allow a privileged user in a guest VM to compromise or crash the...

Citrix XenServer 8.4.x Page Reference Leak (CTX697170)

The version of Citrix XenServer installed on the remote host is 8.4.x. It is, therefore, affected by a vulnerability as referenced in the CTX697170 advisory: - The grant table cache-flush error path fails to drop a page reference, which may allow a privileged user in a guest VM to compromise or...

Linux Distros Unpatched Vulnerability : CVE-2026-102702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addresse...

SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2026:4732-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4732-1 advisory. - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race...

Security update for xen

This update for xen fixes the following issues: CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. CVE-2026-79610: grant-table: double version change race bsc1283322. CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. CVE-2026-102700: gntta...

SUSE-SU-2026:4732-1 Security update for xen

This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems bsc1283321. - CVE-2026-79610: grant-table: double version change race bsc1283322. - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states bsc1283323. - CVE-2026-10270...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

Linux block and network PV device frontends do not zero memory regions before sharing them with the backend CVE-2022-26365, CVE-2022-33740. Additionally, the granularity of the grant table does not allow sharing smaller than a 4K page, resulting in unrelated data residing in the same 4K page as...