PatchFirst · Latest vulnerabilities
Vulnerability published for xen in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 8
This update for xen fixes the following issues: - CVE-2026-79609: x86: XPTI may break on huge-memory systems (bsc#1283321). - CVE-2026-79610: grant-table: double version change race (bsc#1283322). - CVE-2026-79611: VMX: VMentry failure with branch tracing and blocked states (bsc#1283323). - CVE-2026-102700: gnttab: cache-flush handling may cause page reference leak (bsc#1283325).
This update for xen fixes the following issues: - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838). - CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839).
This update for xen fixes the following issues - CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). - CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). - CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531). - CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532). - CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534). - CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535). - CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).
This update for xen fixes the following issues: - CVE-2026-42487: xen: x86 HVM I/O port list traversal (XSA-491) (bsc#1266952). - CVE-2026-42488: xen: x86: mismatched mapcache metadata (XSA-494) (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: xen: domctl lock open to abuse (XSA-492) (bsc#1266953).
This update for xen fixes the following issues: Security fixes: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747) - CVE-2025-58149: Fixed incorrect removal od permissions on PCI device unplug allow PV guests to access memory of devices no longer assigned to it (XSA-476) (bsc#1252692)
This update for xen fixes the following issues: - CVE-2025-27465: Fixed incorrect stubs exception handling for flags recovery (XSA-470) (bsc#1244644) - Fixed more AMD transient execution attacks (XSA-471) (bsc#1246112)
This update for xen fixes the following issues: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) - CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043)
This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) Non-security issue fixed: - Xen host hung at boot up with repeated '(XEN) APIC error on CPU on CPU53: 40(40), Received illegal vector' (bsc#1231046)
Check your installed stack and versions against the current vulnerability feeds.