SUSE-SU-2022:1300-1
Vulnerability Summary
Timeline
Description
Security update for xen This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which could lead to a denial of service in the host (bsc#1197425). - CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be leveraged by an attacker to cause a denial of service in the host (bsc#1197426). - CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue mitigations (bsc#1196915).
Affected Systems
- suse•xen&distro=SUSE Enterprise Storage 7
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise Micro 5.0
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise Real Time 15 SP2
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise Server 15 SP2-BCL
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise Server 15 SP2-LTSS
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Manager Proxy 4.1
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Manager Retail Branch Server 4.1
< 4.13.4_08-150200.3.50.1
- suse•xen&distro=SUSE Manager Server 4.1
< 4.13.4_08-150200.3.50.1
References (15)
- https://www.suse.com/support/update/announcement/2022/suse-su-20221300-1/
- https://bugzilla.suse.com/1194267
- https://bugzilla.suse.com/1196915
- https://bugzilla.suse.com/1197423
- https://bugzilla.suse.com/1197425
- https://bugzilla.suse.com/1197426
- https://www.suse.com/security/cve/CVE-2021-26401
- https://www.suse.com/security/cve/CVE-2022-0001
- https://www.suse.com/security/cve/CVE-2022-0002
- https://www.suse.com/security/cve/CVE-2022-26356
- https://www.suse.com/security/cve/CVE-2022-26357
- https://www.suse.com/security/cve/CVE-2022-26358
- https://www.suse.com/security/cve/CVE-2022-26359
- https://www.suse.com/security/cve/CVE-2022-26360
- https://www.suse.com/security/cve/CVE-2022-26361