SUSE-SU-2025:4419-1

UNKNOWN

Security update for xen

Published Dec 16, 2025

Modified 4 weeks ago

Fix available

This update for xen fixes the following issues:

Update to Xen 4.20.2 (jsc#PED-8907).

Security issues fixed:

CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to it (XSA-476, bsc#1252692).

Other issues fixed:

SUSE:Linux Enterprise Module for Basesystem 15 SP7xen

Fixed in:

4.20.2_02-150700.3.19.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7xen-libs

Fixed in:

4.20.2_02-150700.3.19.1

SUSE:Linux Enterprise Module for Basesystem 15 SP7xen-tools-domU

Fixed in:

4.20.2_02-150700.3.19.1

SUSE:Linux Enterprise Module for Server Applications 15 SP7xen

Fixed in:

4.20.2_02-150700.3.19.1

SUSE:Linux Enterprise Module for Server Applications 15 SP7xen-devel

Fixed in:

4.20.2_02-150700.3.19.1

SUSE:Linux Enterprise Module for Server Applications 15 SP7xen-tools

Fixed in:

4.20.2_02-150700.3.19.1

SUSE:Linux Enterprise Module for Server Applications 15 SP7xen-tools-xendomains-wait-disk

Fixed in:

4.20.2_02-150700.3.19.1

PublishedDec 16, 2025

ModifiedDec 16, 2025