{"id":"CVE-2026-62430","aliases":["ALPINE-CVE-2026-62430","DEBIAN-CVE-2026-62430","EUVD-2026-49783","GHSA-w4qm-qcx6-wmw8","SUSE-SU-2026:3409-1","SUSE-SU-2026:3423-1","SUSE-SU-2026:3451-1","SUSE-SU-2026:3462-1","SUSE-SU-2026:4090-1","UBUNTU-CVE-2026-62430","openSUSE-SU-2026:11441-1"],"status":"published","title":"x86: Out-of-bounds read in vRTC emulation","description":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00243,"percentile":0.15644,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2026-07-28T12:32:33Z","modified":"2026-10-17T13:00:30Z","fixes":[{"ecosystem":"Alpine:v3.21","package":"xen","fixed_in":["4.19.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xen","fixed_in":["4.20.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xen","fixed_in":["4.20.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xen","fixed_in":["4.21.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.17.7-0+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.20.3+127-gc42374a105-0+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.20.3+127-gc42374a105-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.19.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.21.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.7-0+deb12u1"}]}],"versions":["4.17.1+2-gb773c48e36-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1~deb12u1","4.17.2-1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1","4.17.3+10-g091466ba55-1.1~exp1","4.17.3+10-g091466ba55-1.1~exp2","4.17.3+10-g091466ba55-1~deb12u1","4.17.3+36-g54dacb5c02-1","4.17.5+23-ga4e5191dc0-1","4.17.5+23-ga4e5191dc0-1+deb12u1","4.17.5+72-g01140da4e8-1"]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-0+deb13u1"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+37-g61ff35323e-0+deb13u1","4.20.2+37-g61ff35323e-1","4.20.2+7-g1badcf5035-0+deb13u1","4.20.2+7-g1badcf5035-1","4.20.2+7-g1badcf5035-2"]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.3+127-gc42374a105-1"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+37-g61ff35323e-1","4.20.2+7-g1badcf5035-1","4.20.2+7-g1badcf5035-2"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.5_20-150600.3.53.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.5_20-150600.3.53.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.6_14-150500.3.76.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_72-3.148.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_72-3.148.4"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.7_12-150400.4.89.3"}]}],"bundled":15},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4_04-150700.3.46.1"}]}],"bundled":18},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.20.4_04-150700.3.46.1"}]}],"bundled":18},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1-0ubuntu1","4.5.1-0ubuntu2","4.6.0-1ubuntu1","4.6.0-1ubuntu2","4.6.0-1ubuntu4","4.6.0-1ubuntu4.1","4.6.0-1ubuntu4.2","4.6.0-1ubuntu4.3","4.6.5-0ubuntu1","4.6.5-0ubuntu1.1","4.6.5-0ubuntu1.2","4.6.5-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.0-0ubuntu3","4.9.0-0ubuntu4","4.9.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.2-0ubuntu2","4.9.2-0ubuntu6","4.9.2-0ubuntu7","4.11.3+24-g14b62ab3e5-1ubuntu1","4.11.3+24-g14b62ab3e5-1ubuntu2","4.11.3+24-g14b62ab3e5-1ubuntu2.2","4.11.3+24-g14b62ab3e5-1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.4+24-gddaaccbbab-1ubuntu2","4.16.0-1~ubuntu2","4.16.0-1~ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.17.2-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1ubuntu1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1ubuntu2","4.17.3+10-g091466ba55-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.2+7-g1badcf5035-2build2","4.20.2+37-g61ff35323e-1ubuntu1","4.20.3+127-gc42374a105-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+7-g1badcf5035-2","4.20.2+7-g1badcf5035-2build2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.22.0_02-1.1"}]}],"bundled":12}],"products":[{"vendor":"xen","product":"xen"}],"references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-503.html"},{"url":"http://xenbits.xen.org/xsa/advisory-503.html"},{"url":"http://www.openwall.com/lists/oss-security/2026/07/28/19"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62430"},{"url":"https://github.com/advisories/GHSA-w4qm-qcx6-wmw8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-62430","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-62430","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263409-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1271528","tags":["report"]},{"url":"https://bugzilla.suse.com/1271530","tags":["report"]},{"url":"https://bugzilla.suse.com/1271531","tags":["report"]},{"url":"https://bugzilla.suse.com/1271532","tags":["report"]},{"url":"https://bugzilla.suse.com/1271533","tags":["report"]},{"url":"https://bugzilla.suse.com/1271534","tags":["report"]},{"url":"https://bugzilla.suse.com/1271535","tags":["report"]},{"url":"https://bugzilla.suse.com/1271536","tags":["report"]},{"url":"https://bugzilla.suse.com/1271537","tags":["report"]},{"url":"https://bugzilla.suse.com/1271538","tags":["report"]},{"url":"https://bugzilla.suse.com/1271539","tags":["report"]},{"url":"https://bugzilla.suse.com/1271947","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62424","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62428","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62434","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263423-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263451-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263462-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264090-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027519","tags":["report"]},{"url":"https://bugzilla.suse.com/1276838","tags":["report"]},{"url":"https://bugzilla.suse.com/1276839","tags":["report"]},{"url":"https://bugzilla.suse.com/1276841","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-62437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-79603","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-62430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-62430","tags":["report"]},{"url":"https://xenbits.xen.org/xsa/advisory-503.html","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2026-42492","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-62430","title":"x86: Out-of-bounds read in vRTC emulation","description":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.","status":"published","published":"2026-07-28T12:32:33.15Z","modified":"2026-07-28T16:33:30.367Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"adp"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:20:14.999906Z"}],"euvd":[{"id":"EUVD-2026-49783","description":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.","status":"published","published":"2026-07-28T12:32:33Z","modified":"2026-07-28T16:33:30Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:02:30.949894Z"}],"ghsa":[{"id":"GHSA-w4qm-qcx6-wmw8","title":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen...","description":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.","status":"published","published":"2026-07-28T15:32:17Z","modified":"2026-07-28T18:33:03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T15:09:52.627235Z"}],"nvd":[{"id":"CVE-2026-62430","description":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.","status":"published","published":"2026-07-28T13:19:01.913Z","modified":"2026-07-28T17:16:55.22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:12:33.249634Z"}],"osv":[{"id":"ALPINE-CVE-2026-62430","description":"Accesses to the CMOS memory contents are done using an indirect IO port\npair.  Therefore Xen needs to cache the guest chosen index, and one of\nthe usages of the index didn't take the necessary locking to avoid\nconcurrent changes.  As a result, a guest could change the index after\nit being checked, causing a subsequent out-of-bound read access to the\ncontents of an array.","status":"published","published":"2026-07-28T13:19:01.913Z","modified":"2026-10-01T02:17:49.378299134Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:50.764331Z"},{"id":"DEBIAN-CVE-2026-62430","description":"Accesses to the CMOS memory contents are done using an indirect IO port pair.  Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes.  As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.","status":"published","published":"2026-07-28T13:19:01.913Z","modified":"2026-10-04T22:00:09.135313497Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:57.932517Z"},{"id":"UBUNTU-CVE-2026-62430","description":"Accesses to the CMOS memory contents are done using an indirect IO port pair.  Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes.  As a result, a guest could change the index after it being checked, causing a subsequent out-of-bound read access to the contents of an array.","status":"published","published":"2026-07-28T13:19:00Z","modified":"2026-10-17T13:00:30.672124793Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T16:56:43.630667Z"},{"id":"openSUSE-SU-2026:11441-1","title":"xen-4.22.0_02-1.1 on GA media","description":"These are all security issues fixed in the xen-4.22.0_02-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-08-03T00:00:00Z","modified":"2026-08-04T11:45:04.940392014Z","updated_at":"2026-11-02T16:58:39.516824Z"},{"id":"SUSE-SU-2026:3409-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-07-29T11:18:18Z","modified":"2026-07-30T17:15:09.37500199Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3423-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-07-30T07:50:00Z","modified":"2026-07-30T17:15:08.109634165Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3451-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-08-03T11:33:31Z","modified":"2026-08-04T11:45:06.334110948Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3462-1","title":"Security update for xen","description":"This update for xen fixes the following issues\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- pygrub is only supported in de-privileged mode (XSA-508) (bsc#1271947).\n","status":"published","published":"2026-08-03T12:17:12Z","modified":"2026-08-04T11:45:09.007296608Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:4090-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\nUpdate to version 4.20.3 (jsc#PED-8907).\n\nSecurity issues fixed:\n\n- CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528).\n- CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660\n  handling (bsc#1271530).\n- CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531).\n- CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532).\n- CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534).\n- CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535).\n- CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536).\n- CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).\n- CVE-2026-62433: correct buffer checks for DM_OP hypercalls (bsc#1271538).\n- CVE-2026-62434: PoD: Don't try to reclaim special pages (bsc#1271539).\n- CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding (bsc#1276838).\n- CVE-2026-79602: x86: improper handling of HVM emulation return codes (bsc#1276839).\n- CVE-2026-79603: unconditionally do TLB flushing ahead of page scrubbing (bsc#1276841).\n- pygrub is only supported in de-privileged mode (bsc#1271947).\n\nNon security issue fixed:\n\n- Xen: Missing upstream bug fixes (bsc#1027519).\n","status":"published","published":"2026-09-08T12:26:56Z","modified":"2026-09-13T18:23:20.566887008Z","updated_at":"2026-11-02T15:54:05.392906Z"}]}}