SUSE-SU-2022:3728-1

Advisory lineage Upstream: 7 Downstream: 0
Published: 25 Oct 2022, 13:40
Last modified:04 Feb 2026, 03:17

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

25 Oct 2022, 13:40
Published
Vulnerability first disclosed
04 Feb 2026, 03:17
Last Modified
Vulnerability information updated

Description

Security update for xen This update for xen fixes the following issues: - CVE-2022-26365: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (bsc#1200762). - CVE-2022-33740: Fixed issue where Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (bsc#1200762). - CVE-2022-33741: Fixed issue where data residing in the same 4K page as data shared with a backend was being accessible by such backend (bsc#1200762). - CVE-2022-33742: Fixed issue where data residing in the same 4K page as data shared with a backend was being accessible by such backend (bsc#1200762). - CVE-2022-33746: Fixed DoS due to excessively long P2M pool freeing (bsc#1203806). - CVE-2021-28689: Fixed speculative vulnerabilities with bare (non-shim) 32-bit PV guests (bsc#1185104). - CVE-2022-33748: Fixed DoS due to race in locking (bsc#1203807).

Affected Systems

  • suse•xen&distro=SUSE Linux Enterprise Server 12 SP5

    < 4.12.4_28-3.77.1

  • suse•xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5

    < 4.12.4_28-3.77.1

  • suse•xen&distro=SUSE Linux Enterprise Software Development Kit 12 SP5

    < 4.12.4_28-3.77.1

References (12)