Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 564 articles for you...
100
security advisorySuSEDoSSUSE Xen Important Lock Abuse HVM Traversal Vulnern 2026-2668-1
An update that solves four vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2668-1 Release Date: 2026-06-29T05:42:02Z Rating: important References: * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42487 ( NVD ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42489 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42490 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 12 SP5 * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-42487: xen: x86 HVM I/O port list traversal (XSA-491) (bsc#1266952). * CVE-2026-42488: xen: x86: mismatched mapcache metadata (XSA-494) (bsc#1266955). * CVE-2026-42489,CVE-2026-42490:xen: domctl lock open to abuse (XSA-492) (bsc#1266953). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-2668=1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-2668=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS (x86_64) * xen-tools-4.12.4_70-3.145.1 * xen-tools-debuginfo-4.12.4_70-3.145.1 * xen-doc-html-4.12.4_70-3.145.1 * xen-libs-debuginfo-4.12.4_70-3.145.1 * xen-devel-4.12.4_70-3.145.1 * xen-libs-debuginfo-32bit-4.12.4_70-3.145.1 * xen-libs-32bit-4.12.4_70-3.145.1 * xen-4.12.4_70-3.145.1 * xen-tools-domU-debuginfo-4.12.4_70-3.145.1 * xen-debugsource-4.12.4_70-3.145.1 * xen-tools-domU-4.12.4_70-3.145.1 * xen-libs-4.12.4_70-3.145.1 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * xen-tools-4.12.4_70-3.145.1 * xen-tools-debuginfo-4.12.4_70-3.145.1 * xen-doc-html-4.12.4_70-3.145.1 * xen-libs-debuginfo-4.12.4_70-3.145.1 * xen-devel-4.12.4_70-3.145.1 * xen-libs-debuginfo-32bit-4.12.4_70-3.145.1 * xen-libs-32bit-4.12.4_70-3.145.1 * xen-4.12.4_70-3.145.1 * xen-tools-domU-debuginfo-4.12.4_70-3.145.1 * xen-debugsource-4.12.4_70-3.145.1 * xen-tools-domU-4.12.4_70-3.145.1 * xen-libs-4.12.4_70-3.145.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . Critical SUSE Linuxupdate for Xen fixes four important issues. Mitigate risks with this essential security patch now available.. SUSE security update, Xen security fix, SUSE Linux vulnerabilities, important SUSE patch. . Severity: Important. LinuxSecurity.com Team
Jun 29, 2026
•Important
SuSE
202
security advisoryDoSimportantopenSUSE 15.4 Xen Important CPU Corruption Issues 2026-2613-1
An update that solves five vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2613-1 Release Date: 2026-06-24T09:01:48Z Rating: important References: * bsc#1264066 * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2025-54518 * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2025-54518 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54518 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-54518 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42487 ( NVD ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42489 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42490 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise HighPerformance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves five vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues * CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264066). * CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). * CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). * CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2613=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2613=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2613=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2613=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2613=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2613=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2613=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2613=1 * openSUSE Leap 15.4 zypper in -t patchSUSE-2026-2613=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (aarch64 x86_64) * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-doc-html-4.16.7_10-150400.4.86.2 * xen-4.16.7_10-150400.4.86.2 *xen-tools-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (aarch64 i586 x86_64) * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (x86_64) * xen-libs-32bit-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-32bit-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (aarch64_ilp32) * xen-libs-64bit-4.16.7_10-150400.4.86.2 * xen-libs-64bit-debuginfo-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 ## References: *https://www.suse.com/security/cve/CVE-2025-54518.html * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1264066 * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . # Security update for xen Announcement ID: SUSE-SU-2026:2613-1 Release Date: 2026-06-24T09:01:48Z Ra. update, solves, vulnerabilities, installed, security, announcem. . Severity: Important. LinuxSecurity.com Team
Jun 24, 2026
•Important
OpenSUSE
100
security advisorydenial of serviceSuSESUSE Important Security Update Xen Denial of Service CVE-2026-2613-1
An update that solves five vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2613-1 Release Date: 2026-06-24T09:01:48Z Rating: important References: * bsc#1264066 * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2025-54518 * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2025-54518 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2025-54518 ( SUSE ): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2025-54518 ( NVD ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42487 ( NVD ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42489 ( NVD ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-42490 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 * SUSE Linux Enterprise HighPerformance Computing LTSS 15 SP4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP4 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP4 An update that solves five vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues * CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264066). * CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). * CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). * CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2613=1 * SUSE Linux Enterprise Server 15 SP4 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2613=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2613=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2613=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2026-2613=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 zypper in -t patch SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2613=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2613=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2026-2613=1 * openSUSE Leap 15.4 zypper in -t patchSUSE-2026-2613=1 ## Package List: * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (aarch64 x86_64) * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-doc-html-4.16.7_10-150400.4.86.2 * xen-4.16.7_10-150400.4.86.2 *xen-tools-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (aarch64 i586 x86_64) * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (x86_64) * xen-libs-32bit-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-32bit-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (aarch64_ilp32) * xen-libs-64bit-4.16.7_10-150400.4.86.2 * xen-libs-64bit-debuginfo-4.16.7_10-150400.4.86.2 * openSUSE Leap 15.4 (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro 5.3 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Micro 5.4 (x86_64) * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (x86_64) * xen-4.16.7_10-150400.4.86.2 * xen-tools-domU-4.16.7_10-150400.4.86.2 * xen-libs-debuginfo-4.16.7_10-150400.4.86.2 * xen-tools-debuginfo-4.16.7_10-150400.4.86.2 * xen-devel-4.16.7_10-150400.4.86.2 * xen-debugsource-4.16.7_10-150400.4.86.2 * xen-tools-domU-debuginfo-4.16.7_10-150400.4.86.2 * xen-libs-4.16.7_10-150400.4.86.2 * xen-tools-4.16.7_10-150400.4.86.2 * SUSE Linux Enterprise Server 15 SP4 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.16.7_10-150400.4.86.2 ## References: *https://www.suse.com/security/cve/CVE-2025-54518.html * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1264066 * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . Update mitigates five critical issues in SUSE for xen, focusing on security threats and important patches.. SUSE update,xen software,security patch,system vulnerabilities,SUSE security advisory. . Severity: Important. LinuxSecurity.com Team
Jun 24, 2026
•Important
SuSE
89
security advisorydenial of servicefedoraFedora 44 Xen Critical Security Issues Update 2026-24b84f97af
x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488]. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-24b84f97af 2026-06-17 08:41:51.002515+00:00 -------------------------------------------------------------------------------- Name : xen Product : Fedora 44 Version : 4.21.1 Release : 4.fc44 URL : http://xen.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488] -------------------------------------------------------------------------------- ChangeLog: * Fri Jun 12 2026 Michael Young - 4.21.1-4 - x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] - domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] - Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] - x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488] -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-24b84f97af' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jun 17, 2026
•Critical
Fedora
100
security advisorydenial of serviceSuSESUSE Linux 15-SP7 Xen Important Security Update CVE-2026-42487
An update that solves four vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2364-1 Release Date: 2026-06-11T06:54:28Z Rating: important References: * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * Basesystem Module 15-SP7 * Server Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). * CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). * CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2026-2364=1 * Server Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-2364=1 ## Package List: * Basesystem Module 15-SP7 (x86_64) * xen-libs-debuginfo-4.20.3_06-150700.3.41.1 * xen-tools-domU-debuginfo-4.20.3_06-150700.3.41.1 * xen-libs-4.20.3_06-150700.3.41.1 * xen-tools-domU-4.20.3_06-150700.3.41.1 * xen-debugsource-4.20.3_06-150700.3.41.1 * Server Applications Module 15-SP7 (x86_64) * xen-tools-4.20.3_06-150700.3.41.1 * xen-devel-4.20.3_06-150700.3.41.1 * xen-tools-debuginfo-4.20.3_06-150700.3.41.1 * xen-debugsource-4.20.3_06-150700.3.41.1 * xen-4.20.3_06-150700.3.41.1 * Server Applications Module 15-SP7 (noarch) * xen-tools-xendomains-wait-disk-4.20.3_06-150700.3.41.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . Install the important security update for xen to fix four vulnerabilities affecting SUSE Linux Enterprise systems.. SUSE Xen Update Security, Important Xen Patch, Linux Security Advisory. . Severity: Important. LinuxSecurity.com Team
Jun 11, 2026
•Important
SuSE
202
security advisoryupdatethreatopenSUSE Security Notice 2026-2328-1 Significant Updates on Four Xen Risks
An update that solves four vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2328-1 Release Date: 2026-06-10T07:39:28Z Rating: important References: * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server 15 SP5 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). * CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). * CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2026-2328=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2026-2328=1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2328=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2328=1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 zypper in -t patch SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2328=1 * SUSE Linux Enterprise Server 15 SP5 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2328=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64 i586) * xen-tools-domU-4.17.6_12-150500.3.73.1 * xen-libs-debuginfo-4.17.6_12-150500.3.73.1 * xen-tools-domU-debuginfo-4.17.6_12-150500.3.73.1 * xen-debugsource-4.17.6_12-150500.3.73.1 * xen-libs-4.17.6_12-150500.3.73.1 * xen-devel-4.17.6_12-150500.3.73.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-4.17.6_12-150500.3.73.1 * xen-libs-32bit-debuginfo-4.17.6_12-150500.3.73.1 * openSUSE Leap 15.5 (aarch64 x86_64) * xen-4.17.6_12-150500.3.73.1 * xen-tools-debuginfo-4.17.6_12-150500.3.73.1 * xen-doc-html-4.17.6_12-150500.3.73.1 * xen-tools-4.17.6_12-150500.3.73.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.6_12-150500.3.73.1 * openSUSE Leap 15.5 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.17.6_12-150500.3.73.1 * xen-libs-64bit-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * xen-libs-debuginfo-4.17.6_12-150500.3.73.1 * xen-debugsource-4.17.6_12-150500.3.73.1 * xen-libs-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (x86_64) * xen-tools-domU-4.17.6_12-150500.3.73.1 *xen-tools-debuginfo-4.17.6_12-150500.3.73.1 * xen-libs-debuginfo-4.17.6_12-150500.3.73.1 * xen-tools-domU-debuginfo-4.17.6_12-150500.3.73.1 * xen-4.17.6_12-150500.3.73.1 * xen-debugsource-4.17.6_12-150500.3.73.1 * xen-libs-4.17.6_12-150500.3.73.1 * xen-tools-4.17.6_12-150500.3.73.1 * xen-devel-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise High Performance Computing ESPOS 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (x86_64) * xen-tools-domU-4.17.6_12-150500.3.73.1 * xen-tools-debuginfo-4.17.6_12-150500.3.73.1 * xen-libs-debuginfo-4.17.6_12-150500.3.73.1 * xen-tools-domU-debuginfo-4.17.6_12-150500.3.73.1 * xen-4.17.6_12-150500.3.73.1 * xen-debugsource-4.17.6_12-150500.3.73.1 * xen-libs-4.17.6_12-150500.3.73.1 * xen-tools-4.17.6_12-150500.3.73.1 * xen-devel-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (x86_64) * xen-tools-domU-4.17.6_12-150500.3.73.1 * xen-tools-debuginfo-4.17.6_12-150500.3.73.1 * xen-libs-debuginfo-4.17.6_12-150500.3.73.1 * xen-tools-domU-debuginfo-4.17.6_12-150500.3.73.1 * xen-4.17.6_12-150500.3.73.1 * xen-debugsource-4.17.6_12-150500.3.73.1 * xen-libs-4.17.6_12-150500.3.73.1 * xen-tools-4.17.6_12-150500.3.73.1 * xen-devel-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise High Performance Computing LTSS 15 SP5 (noarch) * xen-tools-xendomains-wait-disk-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (x86_64) * xen-tools-domU-4.17.6_12-150500.3.73.1 * xen-tools-debuginfo-4.17.6_12-150500.3.73.1 * xen-libs-debuginfo-4.17.6_12-150500.3.73.1 * xen-tools-domU-debuginfo-4.17.6_12-150500.3.73.1 * xen-4.17.6_12-150500.3.73.1 * xen-debugsource-4.17.6_12-150500.3.73.1 *xen-libs-4.17.6_12-150500.3.73.1 * xen-tools-4.17.6_12-150500.3.73.1 * xen-devel-4.17.6_12-150500.3.73.1 * SUSE Linux Enterprise Server 15 SP5 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.17.6_12-150500.3.73.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . Install the latest openSUSE xen update for important fixes addressing four vulnerabilities promptly.. xen security advisory, openSUSE update, important vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2026
•Important
OpenSUSE
202
security advisorydenial of servicesecurity issueopenSUSE Leap 15.6 Important Xen Denial of Service Fix SUSE-SU-2026-2329-1
An update that solves four vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2329-1 Release Date: 2026-06-10T07:39:36Z Rating: important References: * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). * CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). * CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2329=1 * SUSE Linux Enterprise Server 15 SP6LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2329=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2329=1 ## Package List: * openSUSE Leap 15.6 (aarch64 x86_64 i586) * xen-devel-4.18.5_18-150600.3.50.1 * xen-libs-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-4.18.5_18-150600.3.50.1 * xen-tools-domU-4.18.5_18-150600.3.50.1 * xen-debugsource-4.18.5_18-150600.3.50.1 * xen-tools-domU-debuginfo-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (x86_64) * xen-libs-32bit-4.18.5_18-150600.3.50.1 * xen-libs-32bit-debuginfo-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (aarch64 x86_64) * xen-tools-4.18.5_18-150600.3.50.1 * xen-4.18.5_18-150600.3.50.1 * xen-doc-html-4.18.5_18-150600.3.50.1 * xen-tools-debuginfo-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (noarch) * xen-tools-xendomains-wait-disk-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (aarch64_ilp32) * xen-libs-64bit-4.18.5_18-150600.3.50.1 * xen-libs-64bit-debuginfo-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * xen-devel-4.18.5_18-150600.3.50.1 * xen-tools-debuginfo-4.18.5_18-150600.3.50.1 * xen-tools-4.18.5_18-150600.3.50.1 * xen-tools-domU-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-4.18.5_18-150600.3.50.1 * xen-tools-domU-4.18.5_18-150600.3.50.1 * xen-debugsource-4.18.5_18-150600.3.50.1 * xen-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * xen-devel-4.18.5_18-150600.3.50.1 * xen-tools-debuginfo-4.18.5_18-150600.3.50.1 * xen-tools-4.18.5_18-150600.3.50.1 * xen-tools-domU-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-4.18.5_18-150600.3.50.1 *xen-tools-domU-4.18.5_18-150600.3.50.1 * xen-debugsource-4.18.5_18-150600.3.50.1 * xen-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * xen-tools-xendomains-wait-disk-4.18.5_18-150600.3.50.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . Critical vulnerabilities in xen require immediate attention for openSUSE users to ensure system security and functionality.. openSUSE xen security important patches vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2026
•Important
OpenSUSE
100
security advisoryupdatethreatopenSUSE Important xen Patch for Multiple Threats SUSE-2026-2329-1
An update that solves four vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2026:2329-1 Release Date: 2026-06-10T07:39:36Z Rating: important References: * bsc#1266952 * bsc#1266953 * bsc#1266955 Cross-References: * CVE-2026-42487 * CVE-2026-42488 * CVE-2026-42489 * CVE-2026-42490 CVSS scores: * CVE-2026-42487 ( SUSE ): 8.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42487 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42488 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2026-42488 ( SUSE ): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H * CVE-2026-42489 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42489 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H * CVE-2026-42490 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2026-42490 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP6 LTSS * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that solves four vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952). * CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955). * CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-2329=1 * SUSE Linux Enterprise Server 15 SP6LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2329=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2329=1 ## Package List: * openSUSE Leap 15.6 (aarch64 x86_64 i586) * xen-devel-4.18.5_18-150600.3.50.1 * xen-libs-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-4.18.5_18-150600.3.50.1 * xen-tools-domU-4.18.5_18-150600.3.50.1 * xen-debugsource-4.18.5_18-150600.3.50.1 * xen-tools-domU-debuginfo-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (x86_64) * xen-libs-32bit-4.18.5_18-150600.3.50.1 * xen-libs-32bit-debuginfo-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (aarch64 x86_64) * xen-tools-4.18.5_18-150600.3.50.1 * xen-4.18.5_18-150600.3.50.1 * xen-doc-html-4.18.5_18-150600.3.50.1 * xen-tools-debuginfo-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (noarch) * xen-tools-xendomains-wait-disk-4.18.5_18-150600.3.50.1 * openSUSE Leap 15.6 (aarch64_ilp32) * xen-libs-64bit-4.18.5_18-150600.3.50.1 * xen-libs-64bit-debuginfo-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (x86_64) * xen-devel-4.18.5_18-150600.3.50.1 * xen-tools-debuginfo-4.18.5_18-150600.3.50.1 * xen-tools-4.18.5_18-150600.3.50.1 * xen-tools-domU-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-4.18.5_18-150600.3.50.1 * xen-tools-domU-4.18.5_18-150600.3.50.1 * xen-debugsource-4.18.5_18-150600.3.50.1 * xen-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server 15 SP6 LTSS (noarch) * xen-tools-xendomains-wait-disk-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (x86_64) * xen-devel-4.18.5_18-150600.3.50.1 * xen-tools-debuginfo-4.18.5_18-150600.3.50.1 * xen-tools-4.18.5_18-150600.3.50.1 * xen-tools-domU-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-debuginfo-4.18.5_18-150600.3.50.1 * xen-libs-4.18.5_18-150600.3.50.1 *xen-tools-domU-4.18.5_18-150600.3.50.1 * xen-debugsource-4.18.5_18-150600.3.50.1 * xen-4.18.5_18-150600.3.50.1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 (noarch) * xen-tools-xendomains-wait-disk-4.18.5_18-150600.3.50.1 ## References: * https://www.suse.com/security/cve/CVE-2026-42487.html * https://www.suse.com/security/cve/CVE-2026-42488.html * https://www.suse.com/security/cve/CVE-2026-42489.html * https://www.suse.com/security/cve/CVE-2026-42490.html * https://bugzilla.suse.com/show_bug.cgi?id=1266952 * https://bugzilla.suse.com/show_bug.cgi?id=1266953 * https://bugzilla.suse.com/show_bug.cgi?id=1266955 . Critical update for SUSE addressing multiple threats in xen with important patches to enhance security and stability.. SUSE Linux,xen security patch,openSUSE update,system vulnerabilities. . Severity: Important. LinuxSecurity.com Team
Jun 10, 2026
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!