SUSE-SU-2023:3894-1

Advisory lineage Upstream: 4 Downstream: 0
Published: 29 Sept 2023, 08:36
Last modified:04 Feb 2026, 03:29

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Sept 2023, 08:36
Published
Vulnerability first disclosed
04 Feb 2026, 03:29
Last Modified
Vulnerability information updated

Description

Security update for xen This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). - CVE-2023-20593: Fixed AMD Zenbleed (XSA-433) (bsc#1213616). - CVE-2022-40982: Fixed Intel Gather Data Sampling (XSA-435) (bsc#1214083).

Affected Systems

  • suse•xen&distro=SUSE Linux Enterprise Server 12 SP5

    < 4.12.4_38-3.94.1

  • suse•xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5

    < 4.12.4_38-3.94.1

  • suse•xen&distro=SUSE Linux Enterprise Software Development Kit 12 SP5

    < 4.12.4_38-3.94.1

References (9)