Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE: 2022:2084-1 Important: Race Condition Issues in Xen

suse
Calendar Grey June 14, 2022
Dist Suse Esm H88
SUSE has released a security patch for xen that addresses vital vulnerabilities, offering essential enhancements along with guidance for installation.
An update that fixes three vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965) - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)

References

#1199965 #1199966

Cross- CVE-2022-26362 CVE-2022-26363 CVE-2022-26364

CVSS scores:

CVE-2022-26362 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-26363 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2022-26364 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:

SUSE Linux Enterprise Server 12-SP5

SUSE Linux Enterprise Server for SAP Applications 12-SP5

SUSE Linux Enterprise Software Development Kit 12-SP5

https://www.suse.com/security/cve/CVE-2022-26362.html

https://www.suse.com/security/cve/CVE-2022-26363.html

https://www.suse.com/security/cve/CVE-2022-26364.html

https://bugzilla.suse.com/1199965

https://bugzilla.suse.com/1199966

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:2084-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here