Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 42: Xen Critical Exceptions and Scheduler Attacks 2025-ddaa63a0f5

fedora
Calendar Grey August 8, 2025
Dist Fedora Esm H88
Fedora 42 enhances xen with essential patches to counter transitive threats and rectify flaws in exception management.
update to xen-4.19.3 includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

update to xen-4.19.3 includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350, CVE-2024-36357]

Topics%20covered

Topics Covered

security advisory fedora linux virtual machine exception handling transitive attack

Change Log

* Tue Aug 5 2025 Michael Young - 4.19.3-2 - update to xen-4.19.3 remove patches now included or superceded upstream includes patches for x86: Incorrect stubs exception handling for flags recovery [XSA-470, CVE-2025-27465] x86: Transitive Scheduler Attacks [XSA-471, CVE-2024-36350, CVE-2024-36357]

References


[ 1 ] Bug #2381572 - CVE-2025-27465 xen: Xen: Incorrect Exception Handling [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2381572

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-ddaa63a0f5' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xen
Product: Fedora 42
Version: 4.19.3
Release: 2.fc42
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory fedora linux virtual machine exception handling transitive attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here