Vulnerability-Lookup

SUSE-SU-2026:1692-1

Vulnerability from csaf_suse - Published: 2026-05-05 08:03 - Updated: 2026-09-16 19:20

Summary

Security update for xen

Severity

Moderate

Notes

Title of the patch: Security update for xen

Description of the patch: This update for xen fixes the following issues: - CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 (bsc#1262428). - CVE-2026-23557: Xenstored DoS via XS_RESET_WATCHES command (bsc#1262178). - CVE-2026-23558: grant table v2 race in status page mapping (bsc#1262180).

Patchnames: SUSE-2026-1692,SUSE-SLE-Micro-5.3-2026-1692,SUSE-SLE-Micro-5.4-2026-1692

CVE-2025-54505

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 2 products

Product	Identifier	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64		—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64		—	Vendor Fix

Threats

Impact moderate

CVE-2026-23557

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Recommended 2 products, the same list as for CVE-2025-54505

Threats

Impact moderate

CVE-2026-23558

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

Recommended 2 products, the same list as for CVE-2025-54505

Threats

Impact important

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2026…	self
https://bugzilla.suse.com/1262178	self
https://bugzilla.suse.com/1262180	self
https://bugzilla.suse.com/1262428	self
https://www.suse.com/security/cve/CVE-2025-54505/	self
https://www.suse.com/security/cve/CVE-2026-23557/	self
https://www.suse.com/security/cve/CVE-2026-23558/	self
https://www.suse.com/security/cve/CVE-2025-54505	external
https://bugzilla.suse.com/1261928	external
https://bugzilla.suse.com/1262428	external
https://www.suse.com/security/cve/CVE-2026-23557	external
https://bugzilla.suse.com/1262178	external
https://www.suse.com/security/cve/CVE-2026-23558	external
https://bugzilla.suse.com/1262180	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for xen fixes the following issues:\n\n- CVE-2025-54505: Floating Point Divider State Sampling on AMD CPUs AMD-SN-7053 (bsc#1262428).\n- CVE-2026-23557: Xenstored DoS via XS_RESET_WATCHES command (bsc#1262178).\n- CVE-2026-23558: grant table v2 race in status page mapping (bsc#1262180).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2026-1692,SUSE-SLE-Micro-5.3-2026-1692,SUSE-SLE-Micro-5.4-2026-1692",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_1692-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:1692-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-20261692-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:1692-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2026-May/046207.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262178",
        "url": "https://bugzilla.suse.com/1262178"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262180",
        "url": "https://bugzilla.suse.com/1262180"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1262428",
        "url": "https://bugzilla.suse.com/1262428"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-54505 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-54505/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23557 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23557/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-23558 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-23558/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2026-09-16T19:20:17Z",
      "generator": {
        "date": "2026-05-05T08:03:58Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:1692-1",
      "initial_release_date": "2026-05-05T08:03:58Z",
      "revision_history": [
        {
          "date": "2026-05-05T08:03:58Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T18:31:16Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T19:20:17Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.16.7_08-150400.4.81.2.aarch64",
                "product": {
                  "name": "xen-4.16.7_08-150400.4.81.2.aarch64",
                  "product_id": "xen-4.16.7_08-150400.4.81.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen@4.16.7_08-150400.4.81.2?arch=aarch64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.16.7_08-150400.4.81.2.aarch64",
                "product": {
                  "name": "xen-devel-4.16.7_08-150400.4.81.2.aarch64",
                  "product_id": "xen-devel-4.16.7_08-150400.4.81.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-devel@4.16.7_08-150400.4.81.2?arch=aarch64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.16.7_08-150400.4.81.2.aarch64",
                "product": {
                  "name": "xen-doc-html-4.16.7_08-150400.4.81.2.aarch64",
                  "product_id": "xen-doc-html-4.16.7_08-150400.4.81.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-doc-html@4.16.7_08-150400.4.81.2?arch=aarch64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.16.7_08-150400.4.81.2.aarch64",
                "product": {
                  "name": "xen-libs-4.16.7_08-150400.4.81.2.aarch64",
                  "product_id": "xen-libs-4.16.7_08-150400.4.81.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs@4.16.7_08-150400.4.81.2?arch=aarch64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.16.7_08-150400.4.81.2.aarch64",
                "product": {
                  "name": "xen-tools-4.16.7_08-150400.4.81.2.aarch64",
                  "product_id": "xen-tools-4.16.7_08-150400.4.81.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools@4.16.7_08-150400.4.81.2?arch=aarch64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.16.7_08-150400.4.81.2.aarch64",
                "product": {
                  "name": "xen-tools-domU-4.16.7_08-150400.4.81.2.aarch64",
                  "product_id": "xen-tools-domU-4.16.7_08-150400.4.81.2.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools-domU@4.16.7_08-150400.4.81.2?arch=aarch64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-libs-64bit-4.16.7_08-150400.4.81.2.aarch64_ilp32",
                "product": {
                  "name": "xen-libs-64bit-4.16.7_08-150400.4.81.2.aarch64_ilp32",
                  "product_id": "xen-libs-64bit-4.16.7_08-150400.4.81.2.aarch64_ilp32",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/suse/xen-libs-64bit@4.16.7_08-150400.4.81.2?arch=aarch64_ilp32"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-devel-4.16.7_08-150400.4.81.2.i586",
                "product": {
                  "name": "xen-devel-4.16.7_08-150400.4.81.2.i586",
                  "product_id": "xen-devel-4.16.7_08-150400.4.81.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-devel@4.16.7_08-150400.4.81.2?arch=i586\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.16.7_08-150400.4.81.2.i586",
                "product": {
                  "name": "xen-libs-4.16.7_08-150400.4.81.2.i586",
                  "product_id": "xen-libs-4.16.7_08-150400.4.81.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs@4.16.7_08-150400.4.81.2?arch=i586\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.16.7_08-150400.4.81.2.i586",
                "product": {
                  "name": "xen-tools-domU-4.16.7_08-150400.4.81.2.i586",
                  "product_id": "xen-tools-domU-4.16.7_08-150400.4.81.2.i586",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools-domU@4.16.7_08-150400.4.81.2?arch=i586\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-tools-xendomains-wait-disk-4.16.7_08-150400.4.81.2.noarch",
                "product": {
                  "name": "xen-tools-xendomains-wait-disk-4.16.7_08-150400.4.81.2.noarch",
                  "product_id": "xen-tools-xendomains-wait-disk-4.16.7_08-150400.4.81.2.noarch",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools-xendomains-wait-disk@4.16.7_08-150400.4.81.2?arch=noarch\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-devel-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-devel-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-devel@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-doc-html-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-doc-html-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-doc-html@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-libs-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-libs-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-libs-32bit-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-libs-32bit-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-libs-32bit@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-tools-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-tools-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.16.7_08-150400.4.81.2.x86_64",
                "product": {
                  "name": "xen-tools-domU-4.16.7_08-150400.4.81.2.x86_64",
                  "product_id": "xen-tools-domU-4.16.7_08-150400.4.81.2.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:xen:xen:4.16.7_08:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/xen-tools-domU@4.16.7_08-150400.4.81.2?arch=x86_64\u0026upstream=xen-4.16.7_08-150400.4.81.2.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.3",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.3",
                  "product_id": "SUSE Linux Enterprise Micro 5.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Micro 5.4",
                "product": {
                  "name": "SUSE Linux Enterprise Micro 5.4",
                  "product_id": "SUSE Linux Enterprise Micro 5.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-micro:5.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.16.7_08-150400.4.81.2.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
          "product_id": "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
        },
        "product_reference": "xen-libs-4.16.7_08-150400.4.81.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.16.7_08-150400.4.81.2.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
          "product_id": "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
        },
        "product_reference": "xen-libs-4.16.7_08-150400.4.81.2.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-54505",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-54505"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
          "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-54505",
          "url": "https://www.suse.com/security/cve/CVE-2025-54505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1261928 for CVE-2025-54505",
          "url": "https://bugzilla.suse.com/1261928"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262428 for CVE-2025-54505",
          "url": "https://bugzilla.suse.com/1262428"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
            "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
            "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-05T08:03:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2025-54505"
    },
    {
      "cve": "CVE-2026-23557",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23557"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES\ncommand within a transaction due to an assert() triggering.\n\nIn case xenstored was built with NDEBUG #defined nothing bad will\nhappen, as assert() is doing nothing in this case. Note that the\ndefault is not to define NDEBUG for xenstored builds even in release\nbuilds of Xen.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
          "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23557",
          "url": "https://www.suse.com/security/cve/CVE-2026-23557"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262178 for CVE-2026-23557",
          "url": "https://bugzilla.suse.com/1262178"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
            "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
            "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-05T08:03:58Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-23557"
    },
    {
      "cve": "CVE-2026-23558",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-23558"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The adjustments made for XSA-379 as well as those subsequently becoming\nXSA-387 still left a race window, when a HVM or PVH guest does a grant\ntable version change from v2 to v1 in parallel with mapping the status\npage(s) via XENMEM_add_to_physmap.  Some of the status pages may then be\nfreed while mappings of them would still be inserted into the guest\u0027s\nsecondary (P2M) page tables.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
          "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-23558",
          "url": "https://www.suse.com/security/cve/CVE-2026-23558"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1262180 for CVE-2026-23558",
          "url": "https://bugzilla.suse.com/1262180"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
            "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.7_08-150400.4.81.2.x86_64",
            "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.7_08-150400.4.81.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-05-05T08:03:58Z",
          "details": "important"
        }
      ],
      "title": "CVE-2026-23558"
    }
  ]
}

CVE-2025-54505 (GCVE-0-2025-54505)

Vulnerability from cvelistv5 – Published: 2026-04-27 15:16 – Updated: 2026-04-29 03:04

Summary

A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality.

Severity

2 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-04-27 16:04 UTC

CWE

CWE-1420 - Exposure of Sensitive Information during Transient Execution

Assigner

AMD CNA under the mitre root

CNA scorecard C 63/100 over 74 records in the last 180 days details

References

2 references

URL	Tags
https://www.amd.com/en/resources/product-security…
http://xenbits.xen.org/xsa/advisory-488.html

Impacted products

2 products

Vendor	Product	Version
AMD	AMD EPYC™ 7001 Series Processors	Unaffected: OS update
AMD	AMD EPYC™ Embedded 3000 Series Processors	Unaffected: OS Update

Date Public

2026-04-27 15:15

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-54505",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-04-27T16:04:59.813520Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-04-27T16:05:37.627Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-04-29T03:04:47.232Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://xenbits.xen.org/xsa/advisory-488.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 7001 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "OS update"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "AMD EPYC\u2122 Embedded 3000 Series Processors",
          "vendor": "AMD",
          "versions": [
            {
              "status": "unaffected",
              "version": "OS Update"
            }
          ]
        }
      ],
      "datePublic": "2026-04-27T15:15:36.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality. \u003cbr\u003e"
            }
          ],
          "value": "A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially resulting in loss of confidentiality."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "baseScore": 2,
            "baseSeverity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1420",
              "description": "CWE-1420  Exposure of Sensitive Information during Transient Execution",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-27T15:16:04.613Z",
        "orgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
        "shortName": "AMD"
      },
      "references": [
        {
          "url": "https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-7053.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "AMD PSIRT Automation 1.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b58fc414-a1e4-4f92-9d70-1add41838648",
    "assignerShortName": "AMD",
    "cveId": "CVE-2025-54505",
    "datePublished": "2026-04-27T15:16:04.613Z",
    "dateReserved": "2025-07-23T15:01:50.733Z",
    "dateUpdated": "2026-04-29T03:04:47.232Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-23557 (GCVE-0-2026-23557)

Vulnerability from cvelistv5 – Published: 2026-05-19 12:49 – Updated: 2026-05-19 14:42

Title

Xenstored DoS via XS_RESET_WATCHES command

Summary

Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES command within a transaction due to an assert() triggering. In case xenstored was built with NDEBUG #defined nothing bad will happen, as assert() is doing nothing in this case. Note that the default is not to define NDEBUG for xenstored builds even in release builds of Xen.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-19 14:42 UTC

CWE

CWE-617 - Reachable Assertion

Assigner

XEN CNA under the mitre root

CNA scorecard D 56/100 over 46 records in the last 180 days details

References

3 references

URL	Tags
https://xenbits.xenproject.org/xsa/advisory-484.html
http://www.openwall.com/lists/oss-security/2026/0…
http://xenbits.xen.org/xsa/advisory-484.html

Impacted products

1 product

Vendor	Product	Version
Xen	Xen	Unknown: consult Xen advisory XSA-484

Date Public

2026-04-28 12:00

Credits

This issue was discovered by Andrii Sultanov of Vates.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-19T13:06:41.611Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/28/11"
          },
          {
            "url": "http://xenbits.xen.org/xsa/advisory-484.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-23557",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-19T14:42:12.994792Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-617",
                "description": "CWE-617 Reachable Assertion",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-19T14:42:45.464Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Xen",
          "vendor": "Xen",
          "versions": [
            {
              "status": "unknown",
              "version": "consult Xen advisory XSA-484"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "All Xen systems from Xen 4.2 onwards are vulnerable. Systems up to\nXen 4.1 are not vulnerable.\n\nSystems using the C variant of xenstored or xenstore-stubdom built\nwithout NDEBUG are vulnerable. Systems using the OCaml variant of\nXenstore (oxenstored), or the C variant (xenstored or xenstore-stubdom)\nbuilt with NDEBUG defined are not vulnerable."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "This issue was discovered by Andrii Sultanov of Vates."
        }
      ],
      "datePublic": "2026-04-28T12:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Any guest can cause xenstored to crash by issuing a XS_RESET_WATCHES\ncommand within a transaction due to an assert() triggering.\n\nIn case xenstored was built with NDEBUG #defined nothing bad will\nhappen, as assert() is doing nothing in this case. Note that the\ndefault is not to define NDEBUG for xenstored builds even in release\nbuilds of Xen."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Any unprivileged domain can cause xenstored to crash, causing a\nDoS (denial of service) for any Xenstore action. This will result\nin an inability to perform further domain administration on the host."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-19T12:49:42.202Z",
        "orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
        "shortName": "XEN"
      },
      "references": [
        {
          "url": "https://xenbits.xenproject.org/xsa/advisory-484.html"
        }
      ],
      "title": "Xenstored DoS via XS_RESET_WATCHES command",
      "workarounds": [
        {
          "lang": "en",
          "value": "There is no known mitigation available."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
    "assignerShortName": "XEN",
    "cveId": "CVE-2026-23557",
    "datePublished": "2026-05-19T12:49:42.202Z",
    "dateReserved": "2026-01-14T13:07:36.961Z",
    "dateUpdated": "2026-05-19T14:42:45.464Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-23558 (GCVE-0-2026-23558)

Vulnerability from cvelistv5 – Published: 2026-05-19 12:49 – Updated: 2026-05-20 03:55

Title

grant table v2 race in status page mapping

Summary

The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status page(s) via XENMEM_add_to_physmap. Some of the status pages may then be freed while mappings of them would still be inserted into the guest's secondary (P2M) page tables.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-19 00:00 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

XEN CNA under the mitre root

CNA scorecard D 56/100 over 46 records in the last 180 days details

References

3 references

URL	Tags
https://xenbits.xenproject.org/xsa/advisory-486.html
http://www.openwall.com/lists/oss-security/2026/0…
http://xenbits.xen.org/xsa/advisory-486.html

Impacted products

1 product

Vendor	Product	Version
Xen	Xen	Unknown: consult Xen advisory XSA-486

Date Public

2026-04-28 12:00

Credits

This issue was discovered by Claude Opus 4.6 and diagnosed as a security issue by Rafal Wojtczuk.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2026-05-19T13:06:51.044Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "http://www.openwall.com/lists/oss-security/2026/04/28/13"
          },
          {
            "url": "http://xenbits.xen.org/xsa/advisory-486.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-23558",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-19T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-362",
                "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-20T03:55:35.327Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unknown",
          "product": "Xen",
          "vendor": "Xen",
          "versions": [
            {
              "status": "unknown",
              "version": "consult Xen advisory XSA-486"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "All Xen versions from 4.0 onwards are affected.  Xen versions 3.4 and\nolder are not affected.\n\nOnly x86 HVM and PVH guests permitted to use grant table version 2\ninterfaces can leverage this vulnerability.  x86 PV guests cannot\nleverage this vulnerability.  On Arm, grant table v2 use is explicitly\nunsupported."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "This issue was discovered by Claude Opus 4.6 and diagnosed as a security\nissue by Rafal Wojtczuk."
        }
      ],
      "datePublic": "2026-04-28T12:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The adjustments made for XSA-379 as well as those subsequently becoming\nXSA-387 still left a race window, when a HVM or PVH guest does a grant\ntable version change from v2 to v1 in parallel with mapping the status\npage(s) via XENMEM_add_to_physmap.  Some of the status pages may then be\nfreed while mappings of them would still be inserted into the guest\u0027s\nsecondary (P2M) page tables."
        }
      ],
      "impacts": [
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "Privilege escalation, information leaks, and Denial of Service (DoS) up\nto affecting the entire host cannot be excluded."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-19T12:49:54.652Z",
        "orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
        "shortName": "XEN"
      },
      "references": [
        {
          "url": "https://xenbits.xenproject.org/xsa/advisory-486.html"
        }
      ],
      "title": "grant table v2 race in status page mapping",
      "workarounds": [
        {
          "lang": "en",
          "value": "Using the \"gnttab=max-ver:1\" hypervisor command line option will avoid\nthe vulnerability.\n\nUsing the \"max_grant_version=1\" guest configuration option for HVM and PVH\nguests will also avoid the vulnerability."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
    "assignerShortName": "XEN",
    "cveId": "CVE-2026-23558",
    "datePublished": "2026-05-19T12:49:54.652Z",
    "dateReserved": "2026-01-14T13:07:36.961Z",
    "dateUpdated": "2026-05-20T03:55:35.327Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:1692-1

CVE-2025-54505 (GCVE-0-2025-54505)

CVE-2026-23557 (GCVE-0-2026-23557)

CVE-2026-23558 (GCVE-0-2026-23558)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour