SUSE-SU-2026:2613-1

Details

Description of the patch:

This update for xen fixes the following issues

CVE-2025-54518: AMD-SN-7052: CPU OP Cache Corruption (bsc#1264066).
CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952).
CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955).
CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).

Affected Packages

xen

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

4.16.7_10-150400.4.86.2

xen-devel

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

4.16.7_10-150400.4.86.2

xen-libs

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Micro 5.3SUSE Linux Enterprise Micro 5.4

Fixed in:

4.16.7_10-150400.4.86.2

xen-tools

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

4.16.7_10-150400.4.86.2

xen-tools-domU

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

4.16.7_10-150400.4.86.2

xen-tools-xendomains-wait-disk

SUSE Linux Enterprise High Performance Computing 15 SP4SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP4-LTSSSUSE Linux Enterprise Server 15 SP4SUSE Linux Enterprise Server 15 SP4-LTSS

Fixed in:

4.16.7_10-150400.4.86.2

References

ADVISORY

https://bugzilla.suse.com/1264066

ADVISORY

https://bugzilla.suse.com/1266952

ADVISORY

https://bugzilla.suse.com/1266953

ADVISORY

https://bugzilla.suse.com/1266955

ADVISORY