Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2022:2569-1 Important: Xen Security Update - 10 Issues Fixed

suse
Calendar Grey July 27, 2022
Dist Suse Esm H88
SUSE has issued a security update that tackles 10 vulnerabilities in xen, with some marked as critical. A reboot is required after installation for updates to apply
An update that fixes 10 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

Topics%20covered

Topics Covered

security advisory buffer overflow code execution SUSE software issues important update xen

References

#1199965 #1199966 #1200549 #1201394 #1201469

Cross- CVE-2022-21123 CVE-2022-21125 CVE-2022-21166

CVE-2022-23816 CVE-2022-23825 CVE-2022-26362

CVE-2022-26363 CVE-2022-26364 CVE-2022-29900

CVE-2022-33745

CVSS scores:

CVE-2022-21123 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21123 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CVE-2022-21125 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21125 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2022-21166 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21166 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-23816 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:2569-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow code execution SUSE software issues important update xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here