SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2022:2296-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2296-1 advisory. - x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to...

CVE-2022-26364

CVE-2022-26364 is one of multiple Xen vulnerabilities described in advisories (e.g., GLSA-202208-23, SUSE/Security updates) affecting Xen on x86 PV guests. The issue stems from CPU cache non-coherency interactions with Xen’s page/typeref safety checks, which can cause a guest to incorrectly belie...

CVE-2022-26363

CVE-2022-26363 and related Xen issues arise from CPU cache non-coherency interacting with Xen’s safety checks for page access. The vulnerability is in the x86 PV/hypervisor path where a safe TLB/pagetable state can be invalidly considered safe due to cache/memory divergence, potentially enabling ...