Alerts This Week
Warning Icon 1 770
Alerts This Week
Warning Icon 1 770

SUSE Linux 12-SP5: 2022:2557-1 Important: Xen Issues Fixed

suse
Calendar Grey July 27, 2022
Dist Suse Esm H88
This essential Oracle Patch Update tackles 5 vulnerabilities in DBMS, ensuring enhanced security for impacted releases.
An update that fixes 7 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Topics%20covered

Topics Covered

security advisory vulnerability important SUSE arbitrary execution xen system safety

References

#1200549 #1201394 #1201469

Cross- CVE-2022-21123 CVE-2022-21125 CVE-2022-21166

CVE-2022-23816 CVE-2022-23825 CVE-2022-29900

CVE-2022-33745

CVSS scores:

CVE-2022-21123 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21123 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CVE-2022-21125 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21125 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2022-21166 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21166 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-23816 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2022-23825 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:2557-1
Rating: important

Topics%20covered

Topics Covered

security advisory vulnerability important SUSE arbitrary execution xen system safety

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here