Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 439
Alerts This Week
Warning Icon 1 439

SUSE Linux 5.4: 2024:1259-2 moderate: xen memory disclosure

suse
Calendar Grey April 12, 2024
Scroller Suse
Critical update alert for SUSE Linux xen addressing moderate vulnerabilities related to potential memory leakages and service interruptions.

* bsc#1027519 * bsc#1221984 * bsc#1222302 * bsc#1222453

Summary

## This update for xen fixes the following issues: * CVE-2023-46842: Fixed denial of service due to Xen bug check triggered by HVM hypercalls (XSA-454) in xen x86 (bsc#1221984) * CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455) in xen x86 (bsc#1222302) * CVE-2024-2201: Fixed memory disclosure via Native Branch History Injection (XSA-456) in xen x86 (bsc#1222453) Other fixes: * Update to Xen 4.16.6 (bsc#1027519)

Topics%20covered

Topics Covered

security advisory moderate denial of service kernel update security fix suse SUSE Linux memory disclosure xen

References

* bsc#1027519

* bsc#1221984

* bsc#1222302

* bsc#1222453

Cross-

* CVE-2023-46842

* CVE-2024-2201

* CVE-2024-31142

CVSS scores:

* CVE-2023-46842 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

* CVE-2024-2201 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-31142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* openSUSE Leap 15.4

* openSUSE Leap Micro 5.3

* openSUSE Leap Micro 5.4

* SUSE Linux Enterprise Micro 5.3

* SUSE Linux Enterprise Micro 5.4

* SUSE Linux Enterprise Micro for Rancher 5.3

* SUSE Linux Enterprise Micro for Rancher 5.4

An update that solves three vulnerabilities and has one security fix can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2023-46842.html

Announcement ID: SUSE-SU-2024:1259-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service kernel update security fix suse SUSE Linux memory disclosure xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.