Early Access — Mondoo Vulnerability Intelligence is currently in preview.

SUSE-SU-2022:1300-1

UNKNOWN

Security update for xen

Published Apr 22, 2022

Modified 3 years ago

Fix available

Details

This update for xen fixes the following issues:

CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423).
CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which could lead to a denial of service in the host (bsc#1197425).
CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue mitigations (bsc#1196915).

Affected Packages

SUSE:Enterprise Storage 7xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Enterprise Storage 7xen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Enterprise Storage 7xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Enterprise Storage 7xen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Enterprise Storage 7xen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Enterprise Storage 7xen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSxen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSxen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSxen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSxen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSxen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOSxen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSSxen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Micro 5.0xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Micro 5.0xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Real Time 15 SP2xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Real Time 15 SP2xen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Real Time 15 SP2xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Real Time 15 SP2xen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Real Time 15 SP2xen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Real Time 15 SP2xen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-BCLxen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-BCLxen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-BCLxen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-BCLxen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-BCLxen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-BCLxen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server 15 SP2-LTSSxen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Linux Enterprise Server for SAP Applications 15 SP2xen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Proxy 4.1xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Proxy 4.1xen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Proxy 4.1xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Proxy 4.1xen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Proxy 4.1xen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Proxy 4.1xen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Retail Branch Server 4.1xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Retail Branch Server 4.1xen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Retail Branch Server 4.1xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Retail Branch Server 4.1xen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Retail Branch Server 4.1xen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Retail Branch Server 4.1xen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Server 4.1xen

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Server 4.1xen-devel

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Server 4.1xen-libs

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Server 4.1xen-tools

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Server 4.1xen-tools-domU

Fixed in:

4.13.4_08-150200.3.50.1

SUSE:Manager Server 4.1xen-tools-xendomains-wait-disk

Fixed in:

4.13.4_08-150200.3.50.1

References

REPORThttps://bugzilla.suse.com/1194267 REPORThttps://bugzilla.suse.com/1196915 REPORThttps://bugzilla.suse.com/1197423 REPORThttps://bugzilla.suse.com/1197425 REPORThttps://bugzilla.suse.com/1197426 WEBhttps://www.suse.com/security/cve/CVE-2021-26401 WEBhttps://www.suse.com/security/cve/CVE-2022-0001 WEBhttps://www.suse.com/security/cve/CVE-2022-0002 WEBhttps://www.suse.com/security/cve/CVE-2022-26356 WEBhttps://www.suse.com/security/cve/CVE-2022-26357 WEBhttps://www.suse.com/security/cve/CVE-2022-26358 WEBhttps://www.suse.com/security/cve/CVE-2022-26359 WEBhttps://www.suse.com/security/cve/CVE-2022-26360 WEBhttps://www.suse.com/security/cve/CVE-2022-26361 ADVISORYhttps://www.suse.com/support/update/announcement/2022/suse-su-20221300-1/

SUSE-SU-2022:1300-1 | Mondoo Vulnerability Intelligence