This update for xen fixes the following issues:
- CVE-2026-79608: x86/AMD: ineffectual Zenbleed workaround (bsc#1283317).
- CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321).
- CVE-2026-79610: grant-table: double version change race (bsc#1283322).
- CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323).
- CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325).
This update for xen fixes the following issues:
Update to version 4.20.3 (jsc#PED-8907).
Security issues fixed:
- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).
- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660
handling (bsc#1271530).
- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).
- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).
- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).
- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).
- CVE-2
This update for xen fixes the following issues:
- CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952).
- CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955).
- CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).
This update for xen fixes the following issues:
- CVE-2026-23554: xen: Use after free of paging structures in EPT (bsc#1259247, XSA-480)
- CVE-2026-23555: xen: Xenstored DoS by unprivileged domain (bsc#1259248, XSA-481)
This update for xen fixes the following issues:
- CVE-2025-58150: buffer overrun with shadow paging + tracing (XSA-477) (bsc#1256745).
- CVE-2026-23553: incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747).
This update for xen fixes the following issues:
- CVE-2025-58150: Fixed buffer overrun with shadow paging and
tracing (XSA-477) (bsc#1256745)
- CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation
(XSA-479) (bsc#1256747)
This update for xen fixes the following issues:
Update to Xen 4.20.2 (jsc#PED-8907).
Security issues fixed:
- CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no
longer assigned to it (XSA-476, bsc#1252692).
Other issues fixed:
- Failure to restart xenstored (bsc#1254180).
This update for xen fixes the following issues:
- CVE-2025-58147, CVE-2025-58148: fixed input sanitisation in Viridian hypercalls (XSA-475, bsc#1251271)
This update for xen fixes the following issues:
Security issues fixed:
- CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807).
- CVE-2025-58142: NULL pointer dereference in the Viridian interface due to assumption that the SIM page is mapped when
a synthetic timer message has to be delivered (bsc#1248807).
- CVE-2025-58143: information leak and reference counter underflow in the Viridian interface due to race in the mapping
of the reference TSC page (bsc#1248807).
Other issues fixed:
- efi: Call FreePages() only if needed (bsc#1027519).
- x86/hpet: do local A
This update for xen fixes the following issues:
- Update to Xen 4.20.1
- CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471)
- CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)