1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2022:1300-1

[SUSE-SU-2022:1300-1] Security update for xen

Severity Important
Affected Packages 7
CVEs 9
Info Packages References Vulnerabilities

Security update for xen

This update for xen fixes the following issues:

  • CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423).
  • CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which could lead to a denial of service in the host (bsc#1197425).
  • CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
  • CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue mitigations (bsc#1196915).
Package Affected Version
pkg:rpm/suse/xen?arch=x86_64&distro=sles-15&sp=2 < 4.13.4_08-150200.3.50.1
pkg:rpm/suse/xen-tools?arch=x86_64&distro=sles-15&sp=2 < 4.13.4_08-150200.3.50.1
pkg:rpm/suse/xen-tools-xendomains-wait-disk?arch=noarch&distro=sles-15&sp=2 < 4.13.4_08-150200.3.50.1
pkg:rpm/suse/xen-tools-domU?arch=x86_64&distro=sles-15&sp=2 < 4.13.4_08-150200.3.50.1
pkg:rpm/suse/xen-libs?arch=x86_64&distro=sles-15&sp=2 < 4.13.4_08-150200.3.50.1
pkg:rpm/suse/xen-libs?arch=x86_64&distro=slem-5 < 4.13.4_08-150200.3.50.1
pkg:rpm/suse/xen-devel?arch=x86_64&distro=sles-15&sp=2 < 4.13.4_08-150200.3.50.1
ID
SUSE-SU-2022:1300-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2022/suse-su-20221300-1/
Published
2022-04-22T06:39:52
(2 years ago)
Modified
2022-04-22T06:39:52
(2 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/xen?arch=x86_64&distro=sles-15&sp=2 suse xen < 4.13.4_08-150200.3.50.1 sles-15 x86_64
Affected pkg:rpm/suse/xen-tools?arch=x86_64&distro=sles-15&sp=2 suse xen-tools < 4.13.4_08-150200.3.50.1 sles-15 x86_64
Affected pkg:rpm/suse/xen-tools-xendomains-wait-disk?arch=noarch&distro=sles-15&sp=2 suse xen-tools-xendomains-wait-disk < 4.13.4_08-150200.3.50.1 sles-15 noarch
Affected pkg:rpm/suse/xen-tools-domU?arch=x86_64&distro=sles-15&sp=2 suse xen-tools-domU < 4.13.4_08-150200.3.50.1 sles-15 x86_64
Affected pkg:rpm/suse/xen-libs?arch=x86_64&distro=sles-15&sp=2 suse xen-libs < 4.13.4_08-150200.3.50.1 sles-15 x86_64
Affected pkg:rpm/suse/xen-libs?arch=x86_64&distro=slem-5 suse xen-libs < 4.13.4_08-150200.3.50.1 slem-5 x86_64
Affected pkg:rpm/suse/xen-devel?arch=x86_64&distro=sles-15&sp=2 suse xen-devel < 4.13.4_08-150200.3.50.1 sles-15 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date