Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE 15-SP1: 2021:3977-1 Moderate Security Update for Xen Issues

suse
Calendar Grey December 9, 2021
Dist Suse Esm H88
SUSE has announced a security update, notifying users of a patch for xen that mitigates eight moderate vulnerabilities. Keep yourself updated!
An update that fixes 8 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2021-28701: Fixed race condition in XENMAPSPACE_grant_table handling (XSA-384) (bsc#1189632). - CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363). - CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557). - CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559). - CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554). - Upstream bug fixes (bsc#1027519)

Topics%20covered

Topics Covered

security advisory moderate threat patch SUSE system issue xen

References

#1027519 #1189632 #1191363 #1192554 #1192557

#1192559

Cross- CVE-2021-28701 CVE-2021-28702 CVE-2021-28704

CVE-2021-28705 CVE-2021-28706 CVE-2021-28707

CVE-2021-28708 CVE-2021-28709

CVSS scores:

CVE-2021-28701 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2021-28702 (NVD) : 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVE-2021-28704 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28705 (NVD) : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVE-2021-28705 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28706 (NVD) : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVE-2021-28706 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Announcement ID: SUSE-SU-2021:3977-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate threat patch SUSE system issue xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here