Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2024:1540-1 Moderate: Xen Security Advisory for Updates

suse
Calendar Grey May 7, 2024
Dist Suse Esm H88
SUSE has released security updates for xen to address moderate vulnerabilities. Reboot is advised after installation.
* bsc#1221984 * bsc#1222302 * bsc#1222453 Cross-References:

Summary

## This update for xen fixes the following issues: * CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453) * CVE-2023-46842: HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984) * CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455, bsc#1222302)

Topics%20covered

Topics Covered

security advisory update threat moderate severity SUSE mitigation xen software

References

* bsc#1221984

* bsc#1222302

* bsc#1222453

Cross-

* CVE-2023-46842

* CVE-2024-2201

* CVE-2024-31142

CVSS scores:

* CVE-2023-46842 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

* CVE-2024-2201 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-31142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* openSUSE Leap 15.3

* SUSE Linux Enterprise Micro 5.1

* SUSE Linux Enterprise Micro 5.2

* SUSE Linux Enterprise Micro for Rancher 5.2

An update that solves three vulnerabilities can now be installed.

##

* https://www.suse.com/security/cve/CVE-2023-46842.html

* https://www.suse.com/security/cve/CVE-2024-2201.html

* https://www.suse.com/security/cve/CVE-2024-31142.html

* https://bugzilla.suse.com/show_bug.cgi?id=1221984

Announcement ID: SUSE-SU-2024:1540-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory update threat moderate severity SUSE mitigation xen software

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here