Security update for xen

This update for xen fixes the following issues: Update to Xen 4.17.6. Security issues fixed: CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to them bsc1252692. Other issues fixed: Several upstream bug fixes...

Security update for xen

This update for xen fixes the following issues: Update to Xen 4.20.2 jscPED-8907. Security issues fixed: CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it XSA-476, bsc1252692. Other issues fixed: Failure to...

CVE-2025-58149

The Xen hypervisor is affected by a vulnerability where the libxl detach logic fails to remove access permissions for 64-bit memory BARs when PCI devices are detached. This allows a domain to retain access to memory from a device no longer assigned to it. In PV domains , this leak allows the doma...