Описание
Security update for xen
This update for xen fixes the following issues
- CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 (bsc#1262428).
- CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264066).
- CVE-2026-23557: Xenstored DoS via XS_RESET_WATCHES command (bsc#1262178).
- CVE-2026-23558: grant table v2 race in status page mapping (bsc#1262180).
Список пакетов
Image SLES15-SP6
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-3P
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Basic
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Standard
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS-GDC
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-EC2-ECS-HVM
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-BYOS
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-BYOS-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-BYOS-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-BYOS-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-HPC-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Hardened-BYOS
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Hardened-BYOS-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Hardened-BYOS-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Hardened-BYOS-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Azure-3P
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-BYOS
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-BYOS-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-BYOS-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-BYOS-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-BYOS
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAP-Hardened-GCE
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAPCAL
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAPCAL-Azure
xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAPCAL-EC2
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
Image SLES15-SP6-SAPCAL-GCE
xen-libs-4.18.5_16-150600.3.45.1
SUSE Linux Enterprise Server 15 SP6-LTSS
xen-4.18.5_16-150600.3.45.1
xen-devel-4.18.5_16-150600.3.45.1
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
xen-tools-xendomains-wait-disk-4.18.5_16-150600.3.45.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
xen-4.18.5_16-150600.3.45.1
xen-devel-4.18.5_16-150600.3.45.1
xen-libs-4.18.5_16-150600.3.45.1
xen-tools-4.18.5_16-150600.3.45.1
xen-tools-domU-4.18.5_16-150600.3.45.1
xen-tools-xendomains-wait-disk-4.18.5_16-150600.3.45.1
Ссылки
- Link for SUSE-SU-2026:2102-1
- E-Mail link for SUSE-SU-2026:2102-1
- SUSE Security Ratings
- SUSE Bug 1262178
- SUSE Bug 1262180
- SUSE Bug 1262428
- SUSE Bug 1264066
- SUSE CVE CVE-2025-54505 page
- SUSE CVE CVE-2025-54518 page
- SUSE CVE CVE-2026-23557 page
- SUSE CVE CVE-2026-23558 page
Описание
A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.
Затронутые продукты
Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_16-150600.3.45.1
Ссылки
- CVE-2025-54505
- SUSE Bug 1261928
- SUSE Bug 1262428
Описание
Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resulting in privilege escalation.
Затронутые продукты
Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_16-150600.3.45.1
Ссылки
- CVE-2025-54518
- SUSE Bug 1264013
- SUSE Bug 1264066
- SUSE Bug 1264096
Описание
Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering. In case xenstored was built with NDEBUG #defined nothing bad will happen, as assert() is doing nothing in this case. Note that the default is not to define NDEBUG for xenstored builds even in release builds of Xen.
Затронутые продукты
Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_16-150600.3.45.1
Ссылки
- CVE-2026-23557
- SUSE Bug 1262178
Описание
The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.
Затронутые продукты
Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_16-150600.3.45.1
Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_16-150600.3.45.1
Ссылки
- CVE-2026-23558
- SUSE Bug 1262180