Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE: 2024:2535-1 Important: Xen Security Issues Resolved

suse
Calendar Grey July 16, 2024
Dist Suse Esm H88
SUSE announces critical patches for xen, tackling six vulnerabilities while boosting both security and system efficiency.
* bsc#1214083 * bsc#1221332 * bsc#1221334 * bsc#1221984 * bsc#1222302

Summary

## This update for xen fixes the following issues: * CVE-2023-28746: Register File Data Sampling (XSA-452, bsc#1221332) * CVE-2023-46842: HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984) * CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (XSA-453, bsc#1221334) * CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453) * CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455, bsc#1222302) * CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355)

Topics%20covered

Topics Covered

security advisory security issue DoS important system update SUSE xen

References

* bsc#1214083

* bsc#1221332

* bsc#1221334

* bsc#1221984

* bsc#1222302

* bsc#1222453

* bsc#1227355

Cross-

* CVE-2023-28746

* CVE-2023-46842

* CVE-2024-2193

* CVE-2024-2201

* CVE-2024-31142

* CVE-2024-31143

CVSS scores:

* CVE-2023-28746 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

* CVE-2023-46842 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

* CVE-2024-2193 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-2201 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-31142 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

* CVE-2024-31143 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products:

* SUSE Linux Enterprise High Performance Computing 15 SP2

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2024:2535-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue DoS important system update SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here