shield Security update for xen

SUSE-SUSE-MicroOS-5.2-2026-303

This update for xen fixes the following issues: Security fixes: - CVE-2025-58150: Fixed buffer overrun with shadow paging and tracing (XSA-477) (bsc#1256745) - CVE-2026-23553: Fixed incomplete IBPB for vCPU isolation (XSA-479) (bsc#1256747) - CVE-2025-58149: Fixed incorrect removal od permissions on PCI device unplug allow PV guests to access memory of devices no longer assigned to it (XSA-476) (bsc#1252692) - CVE-2025-27466, CVE-2025-58142, CVE-2025-58143: Fixed multiple vulnerabilities in the Viridian interface (XSA-472) (bsc#1248807) Other fixes: - Fixed virtxend service restart. Caused by a failure to start xenstored (bsc#1254180)

• Release Date
  Jan 27 2026
• References
  Bugzilla: 1256745, 1254180, 1256747, 1252692, 1248807
  CVEs: CVE-2025-58143, CVE-2025-58150, CVE-2025-58142, CVE-2026-23553, CVE-2025-27466, CVE-2025-58149
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.2 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.14.6_28-150300.3.94.1 lock src

  xen-libs
  Xen Virtualization: Libraries

  4.14.6_28-150300.3.94.1 lock rpm