{"id":"CVE-2026-62428","aliases":["ALPINE-CVE-2026-62428","DEBIAN-CVE-2026-62428","EUVD-2026-49779","GHSA-qmxg-rhxf-8273","SUSE-SU-2026:3409-1","SUSE-SU-2026:3423-1","SUSE-SU-2026:3451-1","SUSE-SU-2026:3462-1","SUSE-SU-2026:4090-1","UBUNTU-CVE-2026-62428","openSUSE-SU-2026:11441-1"],"status":"published","title":"grant-table: type confusion in grant-copy","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00115,"percentile":0.01575,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-367"],"published":"2026-07-28T12:32:07Z","modified":"2026-10-17T13:00:30Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"xen","fixed_in":["4.19.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xen","fixed_in":["4.20.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xen","fixed_in":["4.20.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xen","fixed_in":["4.21.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.17.7-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.20.3+127-gc42374a105-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.20.3+127-gc42374a105-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.7-0+deb12u1"}]}],"versions":["4.17.1+2-gb773c48e36-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1~deb12u1","4.17.2-1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1","4.17.3+10-g091466ba55-1.1~exp1","4.17.3+10-g091466ba55-1.1~exp2","4.17.3+10-g091466ba55-1~deb12u1","4.17.3+36-g54dacb5c02-1","4.17.5+23-ga4e5191dc0-1","4.17.5+23-ga4e5191dc0-1+deb12u1","4.17.5+72-g01140da4e8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-0+deb13u1"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+37-g61ff35323e-0+deb13u1","4.20.2+37-g61ff35323e-1","4.20.2+7-g1badcf5035-0+deb13u1","4.20.2+7-g1badcf5035-1","4.20.2+7-g1badcf5035-2"]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-1"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+37-g61ff35323e-1","4.20.2+7-g1badcf5035-1","4.20.2+7-g1badcf5035-2"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.5_20-150600.3.53.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.5_20-150600.3.53.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_72-3.148.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_72-3.148.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4_04-150700.3.46.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4_04-150700.3.46.1"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1-0ubuntu1","4.5.1-0ubuntu2","4.6.0-1ubuntu1","4.6.0-1ubuntu2","4.6.0-1ubuntu4","4.6.0-1ubuntu4.1","4.6.0-1ubuntu4.2","4.6.0-1ubuntu4.3","4.6.5-0ubuntu1","4.6.5-0ubuntu1.1","4.6.5-0ubuntu1.2","4.6.5-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.0-0ubuntu3","4.9.0-0ubuntu4","4.9.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.2-0ubuntu2","4.9.2-0ubuntu6","4.9.2-0ubuntu7","4.11.3+24-g14b62ab3e5-1ubuntu1","4.11.3+24-g14b62ab3e5-1ubuntu2","4.11.3+24-g14b62ab3e5-1ubuntu2.2","4.11.3+24-g14b62ab3e5-1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.4+24-gddaaccbbab-1ubuntu2","4.16.0-1~ubuntu2","4.16.0-1~ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.17.2-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1ubuntu1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1ubuntu2","4.17.3+10-g091466ba55-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.2+7-g1badcf5035-2build2","4.20.2+37-g61ff35323e-1ubuntu1","4.20.3+127-gc42374a105-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+7-g1badcf5035-2","4.20.2+7-g1badcf5035-2build2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.0_02-1.1"}]}],"bundled":12}],"products":[{"vendor":"xen","product":"xen"}],"references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-500.html"},{"url":"http://xenbits.xen.org/xsa/advisory-500.html"},{"url":"http://www.openwall.com/lists/oss-security/2026/07/28/16"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62428"},{"url":"https://github.com/advisories/GHSA-qmxg-rhxf-8273"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-62428","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-62428","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263409-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271528","tags":["report"]},{"url":"https://bugzilla.suse.com/1271530","tags":["report"]},{"url":"https://bugzilla.suse.com/1271531","tags":["report"]},{"url":"https://bugzilla.suse.com/1271532","tags":["report"]},{"url":"https://bugzilla.suse.com/1271533","tags":["report"]},{"url":"https://bugzilla.suse.com/1271534","tags":["report"]},{"url":"https://bugzilla.suse.com/1271535","tags":["report"]},{"url":"https://bugzilla.suse.com/1271536","tags":["report"]},{"url":"https://bugzilla.suse.com/1271537","tags":["report"]},{"url":"https://bugzilla.suse.com/1271538","tags":["report"]},{"url":"https://bugzilla.suse.com/1271539","tags":["report"]},{"url":"https://bugzilla.suse.com/1271947","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62434","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263423-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263451-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263462-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027519","tags":["report"]},{"url":"https://bugzilla.suse.com/1276838","tags":["report"]},{"url":"https://bugzilla.suse.com/1276839","tags":["report"]},{"url":"https://bugzilla.suse.com/1276841","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79603","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-62428","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-62428","tags":["report"]},{"url":"https://xenbits.xen.org/xsa/advisory-500.html","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42492","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-62428","title":"grant-table: type confusion in grant-copy","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T12:32:07.573Z","modified":"2026-07-28T16:33:28.183Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:20:14.665567Z"}],"euvd":[{"id":"EUVD-2026-49779","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T12:32:07Z","modified":"2026-07-28T16:33:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:02:30.949894Z"}],"ghsa":[{"id":"GHSA-qmxg-rhxf-8273","title":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use...","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T15:32:17Z","modified":"2026-07-28T18:33:03Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T15:09:52.627235Z"}],"nvd":[{"id":"CVE-2026-62428","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T13:19:01.713Z","modified":"2026-07-28T17:16:53.687Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-367"],"updated_at":"2026-11-02T14:12:33.249634Z"}],"osv":[{"id":"ALPINE-CVE-2026-62428","description":"When grant-copy operations are processed, the respective grant may or may\nnot already be in use by another operation (a mapping or another copy).\nFor all copy operations the referenced guest frame is looked up.  When\nanother operation is already active for the grant (the grant is \"pinned\"),\nwhat is being supplied back to actually carry out permission checks and\ncopy operation may not be consistent: The permission check may be carried\nout on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T13:19:01.713Z","modified":"2026-10-01T02:17:49.377641846Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"DEBIAN-CVE-2026-62428","description":"When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up.  When another operation is already active for the grant (the grant is \"pinned\"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T13:19:01.713Z","modified":"2026-10-04T22:00:08.081667652Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"UBUNTU-CVE-2026-62428","description":"When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For all copy operations the referenced guest frame is looked up.  When another operation is already active for the grant (the grant is \"pinned\"), what is being supplied back to actually carry out permission checks and copy operation may not be consistent: The permission check may be carried out on a page different from the one involved in the copy.","status":"published","published":"2026-07-28T13:19:00Z","modified":"2026-10-17T13:00:30.209947574Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:43.630667Z"},{"id":"openSUSE-SU-2026:11441-1","title":"xen-4.22.0_02-1.1 on GA media","description":"These are all security issues fixed in the xen-4.22.0_02-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-03T00:00:00Z","modified":"2026-08-04T11:45:04.940392014Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"SUSE-SU-2026:3409-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-07-29T11:18:18Z","modified":"2026-07-30T17:15:09.37500199Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3423-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-07-30T07:50:00Z","modified":"2026-07-30T17:15:08.109634165Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3451-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-08-03T11:33:31Z","modified":"2026-08-04T11:45:06.334110948Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3462-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-08-03T12:17:12Z","modified":"2026-08-04T11:45:09.007296608Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:4090-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\nUpdate to version 4.20.3 (jsc#PED-8907).\n\nSecurity issues fixed:\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660\n  handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838).\n- CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839).\n- CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing (bsc#1276841).\n- pygrub is only supported in de-privileged mode (bsc#1271947).\n\nNon security issue fixed:\n\n- Xen: Missing upstream bug fixes (bsc#1027519).\n","status":"published","published":"2026-09-08T12:26:56Z","modified":"2026-09-13T18:23:20.566887008Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}