SUSE-SU-2026:0394-1

csafDEsuse_csaf

Security update for xen

view advisory published 2026-02-05

Security update for xen

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2026-23553US——
In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between v…
CVE-2025-58150US——
Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest control…
CVE-2025-58149US——
When passing through PCI devices, the detach logic in libxl won't remove access permissions to any 64bit memory BARs the device might have. As a result a domain can still have acc…
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • Fixedxen-libs-0:4.16.7_06-150400.4.78.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedxen-libs-0:4.16.7_06-150400.4.78.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedxen-libs-0:4.16.7_06-150400.4.78.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedxen-libs-0:4.16.7_06-150400.4.78.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedxen-libs-0:4.16.7_06-150400.4.78.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedxen-libs-0:4.16.7_06-150400.4.78.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan