Back Linuxsecurity openSUSE Leap 15.5: Xen Moderate Memory Access Risk SUSE-2025:4490
This update for xen fixes the following issues: Update to Xen 4.17.6. Security issues fixed: * CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows PV guests to access memory of devices no longer assigned to them (bsc#1252692). Other issues fixed: * Several upstream bug fixes (bsc#1027519). * Failure to restart xenstored (bsc#1254180). ## Special Instructions and Notes: * Please reboot the system after installing this update.
## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-4490=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-4490=1
## Patch Instructions:
To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
zypper in -t patch SUSE-2025-4490=1
* SUSE Linux Enterprise Micro 5.5
zypper in -t patch SUSE-SLE-Micro-5.5-2025-4490=1
* openSUSE Leap 15.5 (aarch64 x86_64 i586) * xen-tools-domU-debuginfo-4.17.6_02-150500.3.56.1 * xen-debugsource-4.17.6_02-150500.3.56.1 * xen-devel-4.17.6_02-150500.3.56.1 * xen-libs-debuginfo-4.17.6_02-150500.3.56.1 * xen-libs-4.17.6_02-150500.3.56.1 * xen-tools-domU-4.17.6_02-150500.3.56.1 * openSUSE Leap 15.5 (x86_64) * xen-libs-32bit-debuginfo-4.17.6_02-150500.3.56.1 * xen-libs-32bit-4.17.6_02-150500.3.56.1 * openSUSE Leap 15.5 (aarch64 x86_64) * xen-tools-4.17.6_02-150500.3.56.1 * xen-doc-html-4.17.6_02-150500.3.56.1 * xen-4.17.6_02-150500.3.56.1 * xen-tools-debuginfo-4.17.6_02-150500.3.56.1 * openSUSE Leap 15.5 (noarch) * xen-tools-xendomains-wait-disk-4.17.6_02-150500.3.56.1 * openSUSE Leap 15.5 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.17.6_02-150500.3.56.1 * xen-libs-64bit-4.17.6_02-150500.3.56.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * xen-libs-debuginfo-4.17.6_02-150500.3.56.1 * Read the Full Advisory
* openSUSE Leap 15.5 (aarch64 x86_64 i586)
* xen-tools-domU-debuginfo-4.17.6_02-150500.3.56.1
* xen-debugsource-4.17.6_02-150500.3.56.1
* xen-devel-4.17.6_02-150500.3.56.1
* xen-libs-debuginfo-4.17.6_02-150500.3.56.1
* xen-libs-4.17.6_02-150500.3.56.1
* xen-tools-domU-4.17.6_02-150500.3.56.1
* openSUSE Leap 15.5 (x86_64)
* xen-libs-32bit-debuginfo-4.17.6_02-150500.3.56.1
* xen-libs-32bit-4.17.6_02-150500.3.56.1
* openSUSE Leap 15.5 (aarch64 x86_64)
* xen-tools-4.17.6_02-150500.3.56.1
* xen-doc-html-4.17.6_02-150500.3.56.1
* xen-4.17.6_02-150500.3.56.1
* xen-tools-debuginfo-4.17.6_02-150500.3.56.1
* openSUSE Leap 15.5 (noarch)
* xen-tools-xendomains-wait-disk-4.17.6_02-150500.3.56.1
* openSUSE Leap 15.5 (aarch64_ilp32)
* xen-libs-64bit-debuginfo-4.17.6_02-150500.3.56.1
* xen-libs-64bit-4.17.6_02-150500.3.56.1
* SUSE Linux Enterprise Micro 5.5 (x86_64)
* xen-libs-debuginfo-4.17.6_02-150500.3.56.1
* bsc#1027519 * bsc#1252692 * bsc#1254180 ## References: * * * *
*
*
*
*
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
