Vulnerability-Lookup

SUSE-SU-2025:02290-1

Vulnerability from csaf_suse - Published: 2025-07-11 11:13 - Updated: 2025-07-11 11:13

Summary

Security update for xen

Severity

Moderate

Notes

Title of the patch: Security update for xen

Description of the patch: This update for xen fixes the following issues: - CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) - CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043)

Patchnames: SUSE-2025-2290,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2290

CVE-2024-28956

5.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

Recommended 7 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2025-1713

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 7 products, the same list as for CVE-2024-28956

Threats

Impact moderate

References

12 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2025…	self
https://bugzilla.suse.com/1238043	self
https://bugzilla.suse.com/1243117	self
https://www.suse.com/security/cve/CVE-2024-28956/	self
https://www.suse.com/security/cve/CVE-2025-1713/	self
https://www.suse.com/security/cve/CVE-2024-28956	external
https://bugzilla.suse.com/1242006	external
https://www.suse.com/security/cve/CVE-2025-1713	external
https://bugzilla.suse.com/1238043	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for xen fixes the following issues:\n\n- CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117)\n- CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2025-2290,SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-2290",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2025_02290-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2025:02290-1",
        "url": "https://www.suse.com/support/update/announcement/2025/suse-su-202502290-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2025:02290-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2025-July/040683.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1238043",
        "url": "https://bugzilla.suse.com/1238043"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1243117",
        "url": "https://bugzilla.suse.com/1243117"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2024-28956 page",
        "url": "https://www.suse.com/security/cve/CVE-2024-28956/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-1713 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-1713/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2025-07-11T11:13:27Z",
      "generator": {
        "date": "2025-07-11T11:13:27Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2025:02290-1",
      "initial_release_date": "2025-07-11T11:13:27Z",
      "revision_history": [
        {
          "date": "2025-07-11T11:13:27Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.12.4_60-3.127.1.aarch64",
                "product": {
                  "name": "xen-4.12.4_60-3.127.1.aarch64",
                  "product_id": "xen-4.12.4_60-3.127.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.12.4_60-3.127.1.aarch64",
                "product": {
                  "name": "xen-devel-4.12.4_60-3.127.1.aarch64",
                  "product_id": "xen-devel-4.12.4_60-3.127.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.12.4_60-3.127.1.aarch64",
                "product": {
                  "name": "xen-doc-html-4.12.4_60-3.127.1.aarch64",
                  "product_id": "xen-doc-html-4.12.4_60-3.127.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.12.4_60-3.127.1.aarch64",
                "product": {
                  "name": "xen-libs-4.12.4_60-3.127.1.aarch64",
                  "product_id": "xen-libs-4.12.4_60-3.127.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.12.4_60-3.127.1.aarch64",
                "product": {
                  "name": "xen-tools-4.12.4_60-3.127.1.aarch64",
                  "product_id": "xen-tools-4.12.4_60-3.127.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.12.4_60-3.127.1.aarch64",
                "product": {
                  "name": "xen-tools-domU-4.12.4_60-3.127.1.aarch64",
                  "product_id": "xen-tools-domU-4.12.4_60-3.127.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-libs-64bit-4.12.4_60-3.127.1.aarch64_ilp32",
                "product": {
                  "name": "xen-libs-64bit-4.12.4_60-3.127.1.aarch64_ilp32",
                  "product_id": "xen-libs-64bit-4.12.4_60-3.127.1.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-devel-4.12.4_60-3.127.1.i586",
                "product": {
                  "name": "xen-devel-4.12.4_60-3.127.1.i586",
                  "product_id": "xen-devel-4.12.4_60-3.127.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.12.4_60-3.127.1.i586",
                "product": {
                  "name": "xen-libs-4.12.4_60-3.127.1.i586",
                  "product_id": "xen-libs-4.12.4_60-3.127.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.12.4_60-3.127.1.i586",
                "product": {
                  "name": "xen-tools-domU-4.12.4_60-3.127.1.i586",
                  "product_id": "xen-tools-domU-4.12.4_60-3.127.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-4.12.4_60-3.127.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-devel-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-devel-4.12.4_60-3.127.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-doc-html-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-doc-html-4.12.4_60-3.127.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-libs-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-libs-4.12.4_60-3.127.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-libs-32bit-4.12.4_60-3.127.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-tools-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-tools-4.12.4_60-3.127.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.12.4_60-3.127.1.x86_64",
                "product": {
                  "name": "xen-tools-domU-4.12.4_60-3.127.1.x86_64",
                  "product_id": "xen-tools-domU-4.12.4_60-3.127.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles-ltss-extended-security:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-devel-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-libs-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-tools-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.12.4_60-3.127.1.x86_64 as component of SUSE Linux Enterprise Server LTSS Extended Security 12 SP5",
          "product_id": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.12.4_60-3.127.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-28956",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2024-28956"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2024-28956",
          "url": "https://www.suse.com/security/cve/CVE-2024-28956"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1242006 for CVE-2024-28956",
          "url": "https://bugzilla.suse.com/1242006"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-11T11:13:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2024-28956"
    },
    {
      "cve": "CVE-2025-1713",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-1713"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When setting up interrupt remapping for legacy PCI(-X) devices,\nincluding PCI(-X) bridges, a lookup of the upstream bridge is required.\nThis lookup, itself involving acquiring of a lock, is done in a context\nwhere acquiring that lock is unsafe.  This can lead to a deadlock.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64",
          "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-1713",
          "url": "https://www.suse.com/security/cve/CVE-2025-1713"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1238043 for CVE-2025-1713",
          "url": "https://bugzilla.suse.com/1238043"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-devel-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-doc-html-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-32bit-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-libs-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-4.12.4_60-3.127.1.x86_64",
            "SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:xen-tools-domU-4.12.4_60-3.127.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2025-07-11T11:13:27Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-1713"
    }
  ]
}

CVE-2024-28956 (GCVE-0-2024-28956)

Vulnerability from cvelistv5 – Published: 2025-05-13 21:02 – Updated: 2026-09-08 08:38

Summary

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Severity

5.6 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-14 14:42 UTC

CWE

Information Disclosure
CWE-1421 - Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

Assigner

intel mitre root

References

7 references

URL	Tags
https://intel.com/content/www/us/en/security-cent…
http://xenbits.xen.org/xsa/advisory-469.html
http://www.openwall.com/lists/oss-security/2025/05/12/5
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2025…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

4 products

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references
Siemens	SIMATIC S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)
Siemens	SIPLUS S7-1500 CPU 1518-4 PN/DP MFP	Affected: V3.1.6 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T19:29:44.255Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://xenbits.xen.org/xsa/advisory-469.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/05/12/5"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00021.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-28956",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T14:42:03.518493Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-14T14:43:48.581Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:38:59.745Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "cvssV4_0": {
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 5.7,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Information Disclosure",
              "lang": "en"
            },
            {
              "cweId": "CWE-1421",
              "description": "Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-13T21:02:56.170Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html",
          "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01153.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2024-28956",
    "datePublished": "2025-05-13T21:02:56.170Z",
    "dateReserved": "2024-05-23T17:14:54.799Z",
    "dateUpdated": "2026-09-08T08:38:59.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-1713 (GCVE-0-2025-1713)

Vulnerability from cvelistv5 – Published: 2025-07-17 13:59 – Updated: 2025-07-17 14:21

Title

deadlock potential with VT-d and legacy PCI device pass-through

Summary

When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-07-17 14:17 UTC

CWE

CWE-833 - Deadlock

Assigner

XEN mitre root

References

5 references

URL	Tags
https://xenbits.xenproject.org/xsa/advisory-467.html
http://www.openwall.com/lists/oss-security/2025/02/27/1
http://xenbits.xen.org/xsa/advisory-467.html
http://www.openwall.com/lists/oss-security/2025/02/27/3
http://www.openwall.com/lists/oss-security/2025/02/28/1

Impacted products

1 product

Vendor	Product	Version
Xen	Xen	Unknown: consult Xen advisory XSA-467

Date Public

2025-02-27 12:52

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-07-17T14:04:25.770Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/02/27/1"
          },
          {
            "url": "http://xenbits.xen.org/xsa/advisory-467.html"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/02/27/3"
          },
          {
            "url": "http://www.openwall.com/lists/oss-security/2025/02/28/1"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-1713",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-17T14:17:20.052947Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-833",
                "description": "CWE-833 Deadlock",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-17T14:21:42.020Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Xen",
          "vendor": "Xen",
          "versions": [
            {
              "status": "unknown",
              "version": "consult Xen advisory XSA-467"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "Xen versions 4.0 and later are affected.  Xen versions 3.4 and earlier\nare not directly affected, but had other issues.\n\nSystems with Intel IOMMU hardware (VT-d) are affected.  Systems using\nAMD or non-x86 hardware are not affected.\n\nOnly systems where certain kinds of devices are passed through to an\nunprivileged guest are vulnerable."
        }
      ],
      "datePublic": "2025-02-27T12:52:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "When setting up interrupt remapping for legacy PCI(-X) devices,\nincluding PCI(-X) bridges, a lookup of the upstream bridge is required.\nThis lookup, itself involving acquiring of a lock, is done in a context\nwhere acquiring that lock is unsafe.  This can lead to a deadlock."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "The passing through of certain kinds of devices to an unprivileged guest\ncan result in a Denial of Service (DoS) affecting the entire host.\n\nNote: Normal usage of such devices by a privileged domain can also\n      trigger the issue.  In such a scenario, the deadlock is not\n      considered a security issue, but just a plain bug."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-17T13:59:46.231Z",
        "orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
        "shortName": "XEN"
      },
      "references": [
        {
          "url": "https://xenbits.xenproject.org/xsa/advisory-467.html"
        }
      ],
      "title": "deadlock potential with VT-d and legacy PCI device pass-through",
      "workarounds": [
        {
          "lang": "en",
          "value": "Avoiding the passing through of the affected device types will avoid\nthe vulnerability."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
    "assignerShortName": "XEN",
    "cveId": "CVE-2025-1713",
    "datePublished": "2025-07-17T13:59:46.231Z",
    "dateReserved": "2025-02-26T09:04:42.837Z",
    "dateUpdated": "2025-07-17T14:21:42.020Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2025:02290-1

CVE-2024-28956 (GCVE-0-2024-28956)

CVE-2025-1713 (GCVE-0-2025-1713)

Tags

Sightings

Nomenclature

Related by attack behaviour