p PatchFirst

SUSE-SU-2026:2668-1

SUSE-SU-2026:2668-1 · Security update for xen

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for xen fixes the following issues: - CVE-2026-42487: xen: x86 HVM I/O port list traversal (XSA-491) (bsc#1266952). - CVE-2026-42488: xen: x86: mismatched mapcache metadata (XSA-494) (bsc#1266955). - CVE-2026-42489,CVE-2026-42490: xen: domctl lock open to abuse (XSA-492) (bsc#1266953).

Fix available

Published
Updated

Stack: system

Affected products and versions

  • xen SUSE:Linux Enterprise Server 12 SP5-LTSS

    Affected ranges
    • ECOSYSTEM: < 4.12.4_70-3.145.1

    Update to 4.12.4_70-3.145.1

  • xen SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5

    Affected ranges
    • ECOSYSTEM: < 4.12.4_70-3.145.1

    Update to 4.12.4_70-3.145.1

Original sources

Check your server →