Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE 12 SP5: 2024:3979-1 moderate: xen issues fixed including deadlocks

suse
Calendar Grey November 12, 2024
Dist Suse Esm H88
The latest security updates from SUSE tackle major vulnerabilities; apply the patch immediately to enhance system security and overall performance.
* bsc#1231046 * bsc#1232622 * bsc#1232624 Cross-References:

Summary

## This update for xen fixes the following issues: Security issues fixed: * CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) * CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) Non-security issue fixed: * Xen host hung at boot up with repeated "(XEN) APIC error on CPU on CPU53: 40(40), Received illegal vector" (bsc#1231046)

Topics%20covered

Topics Covered

security advisory security issue update bug fix moderate severity SUSE xen

References

* bsc#1231046

* bsc#1232622

* bsc#1232624

Cross-

* CVE-2024-45818

* CVE-2024-45819

CVSS scores:

* CVE-2024-45818 ( SUSE ): 8.2

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

* CVE-2024-45818 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

* CVE-2024-45819 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N

* CVE-2024-45819 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* SUSE Linux Enterprise High Performance Computing 12 SP5

* SUSE Linux Enterprise Server 12 SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS 12-SP5

* SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security 12-SP5

* SUSE Linux Enterprise Server for SAP Applications 12 SP5

Announcement ID: SUSE-SU-2024:3979-1
Release Date: 2024-11-12T16:13:53Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory security issue update bug fix moderate severity SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here