PT-2026-48243 · Xen+1 · Xen

Andrew Cooper · Publicado 2026-06-09 · Atualizado 2026-06-18 · CVE-2026-42489

OSV

CVSS v3.1

5.3

Média

Vetor base

AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H

This update for xen fixes the following issues:

• CVE-2026-42487: x86 HVM I/O port list traversal (bsc#1266952).
• CVE-2026-42488: x86: mismatched mapcache metadata (bsc#1266955).
• CVE-2026-42489,CVE-2026-42490: domctl lock open to abuse (bsc#1266953).

Correção

Improper Locking

Enumeração de Fraquezas

CWE-667

Identificadores relacionados

CVE-2026-42489

SUSE-SU-2026:2328-1

SUSE-SU-2026:2329-1

SUSE-SU-2026:2364-1

Produtos afetados

Xen

Referências · 18

• https://osv.dev/vulnerability/SUSE-SU-2026:2329-1 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20262329-1 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:2364-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-42489 · Nota de Segurança
• https://twitter.com/threatcluster/status/2064808832748994871 · Publicação no Twitter
• https://bugzilla.suse.com/1266952 · Nota
• https://xenbits.xenproject.org/xsa/advisory-492.html · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:2328-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-42487 · Nota
• https://bugzilla.suse.com/1266955 · Nota
• https://twitter.com/oss_security/status/2067405461507227844 · Publicação no Twitter
• https://suse.com/support/update/announcement/2026/suse-su-20262328-1 · Nota
• https://bugzilla.suse.com/1266953 · Nota
• https://suse.com/security/cve/CVE-2026-42488 · Nota
• https://suse.com/security/cve/CVE-2026-42489 · Nota