Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: Moderate Security Update for Xen CVE-2025-58149 Released Today

suse
Calendar Grey December 17, 2025
Dist Suse Esm H88
Moderate security update for Xen in SUSE addressing CVE-2025-58149 and improving system stability with additional features.
An update that solves one vulnerability, contains one feature and has one security fix can now be installed.

Summary

## This update for xen fixes the following issues: Update to Xen 4.20.2 (jsc#PED-8907). Security issues fixed: * CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it (XSA-476, bsc#1252692). Other issues fixed: * Failure to restart xenstored (bsc#1254180).

Topics%20covered

Topics Covered

security advisory moderate SuSE DoS xen PCI access

References

* bsc#1252692

* bsc#1254180

* jsc#PED-8907

Cross-

* CVE-2025-58149

CVSS scores:

* CVE-2025-58149 ( SUSE ): 4.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N

* CVE-2025-58149 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

* CVE-2025-58149 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products:

* Basesystem Module 15-SP7

* Server Applications Module 15-SP7

* SUSE Linux Enterprise Desktop 15 SP7

* SUSE Linux Enterprise Real Time 15 SP7

* SUSE Linux Enterprise Server 15 SP7

* SUSE Linux Enterprise Server for SAP Applications 15 SP7

An update that solves one vulnerability, contains one feature and has one

security fix can now be installed.

##

* https://www.suse.com/security/cve/CVE-2025-58149.html

Announcement ID: SUSE-SU-2025:4419-1
Release Date: 2025-12-16T18:57:19Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate SuSE DoS xen PCI access

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here