ROS-20261002-73-0131

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20261002-73-0130

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:4090-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4090-1 advisory. Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the ISO9660 driver of the libfsimage library in Xen hypervisors allows attackers to increase their privileges.

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to reading data outside of the allowed range in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE-SU-2026:4090-1 Security update for xen

This update for xen fixes the following issues: Update to version 4.20.3 jscPED-8907. Security issues fixed: - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling...

Security update for xen

This update for xen fixes the following issues CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. CVE-2026-62426,CVE-2026-62427: sysctl and platform-op...

SUSE-SU-2026:3451-1 Security update for xen

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...

Fedora 44 : xen (2026-bf1da84dfc)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-bf1da84dfc advisory. update to xen 4.21.2 includes security fixes x86 shadow paging is deprecated XSA-495, CVE-2026-42493 vIRQ event channel binding may break Xenstore...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2026:3409-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3409-1 advisory. This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. -...

SUSE CVE-2026-42494

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

SUSE-SU-2026:3423-1 Security update for xen

This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated bsc1271528. - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling bsc1271530. - CVE-2026-62426,CVE-2026-62427: sysctl and...

Linux Distros Unpatched Vulnerability : CVE-2026-62424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...

Linux Distros Unpatched Vulnerability : CVE-2026-62425

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...

Linux Distros Unpatched Vulnerability : CVE-2026-42494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...

Linux Distros Unpatched Vulnerability : CVE-2026-42495

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SU...

SUSE CVE-2026-42495

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

SUSE CVE-2026-62423

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

SUSE CVE-2026-62424

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...

ALPINE-CVE-2026-62423

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. The directory and Rock Ridge / SUSP walk in libfsimage's iso9660 driver derives several lengths directly from attacker-controlled on-disk fields without validating them:...