Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

openSUSE Leap 15.5: SUSE-2025:01860-1 moderate: xen issues

suse
Calendar Grey June 10, 2025
Dist Suse Esm H88
Recent updates for SUSE address various security vulnerabilities in Xen that impact both openSUSE Leap and SUSE Linux Enterprise Micro systems.
* bsc#1234282 * bsc#1238043 * bsc#1243117 Cross-References:

Summary

## This update for xen fixes the following issues: * CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) * CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks (XSA-466) (bsc#1234282) * CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043)

Topics%20covered

Topics Covered

security advisory moderate security fix xen openSUSE SUSE Linux Enterprise

References

* bsc#1234282

* bsc#1238043

* bsc#1243117

Cross-

* CVE-2024-28956

* CVE-2024-53241

* CVE-2025-1713

CVSS scores:

* CVE-2024-28956 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-28956 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

* CVE-2024-28956 ( NVD ): 5.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2024-28956 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

* CVE-2024-53241 ( SUSE ): 6.8

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-53241 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Announcement ID: SUSE-SU-2025:01860-1
Release Date: 2025-06-10T08:11:58Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security fix xen openSUSE SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here