Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

SUSE: 2025:02030-1 moderate: xen CVE-2024-28956 security patch

suse
Calendar Grey June 20, 2025
Dist Suse Esm H88
Security enhancement for Xen, resolving CVE-2024-28956. Efficient strategies to implement updates for SUSE environments.
* bsc#1027519 * bsc#1243117 Cross-References: * CVE-2024-28956

Summary

## This update for xen fixes the following issues: Security fixes: * CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) Other fixes: * Upstream bug fixes (bsc#1027519)

Topics%20covered

Topics Covered

security advisory moderate security issue suse system protection xen

References

* bsc#1027519

* bsc#1243117

Cross-

* CVE-2024-28956

CVSS scores:

* CVE-2024-28956 ( SUSE ): 5.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

* CVE-2024-28956 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

* CVE-2024-28956 ( NVD ): 5.7

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2024-28956 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected Products:

* Basesystem Module 15-SP7

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

Announcement ID: SUSE-SU-2025:02030-1
Release Date: 2025-06-20T07:04:04Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate security issue suse system protection xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here