openSUSE: Xen Important Memory Access Issues Vuln 2026:0012

This update for xen fixes the following issues: Security issues fixed: * CVE-2025-27466: NULL pointer dereference in the Viridian interface when updating the reference TSC area (bsc#1248807). * CVE-2025-58142: NULL pointer dereference in the Viridian interface due to assumption that the SIM page is mapped when a synthetic timer message has to be delivered (bsc#1248807). * CVE-2025-58143: information leak and reference counter underflow in the Viridian interface due to race in the mapping of the reference TSC page (bsc#1248807). * CVE-2025-58147: incorrect input sanitisation in Viridian hypercalls using the HV_VP_SET Sparse format can lead to out-of-bounds write through `vpmask_set()` (bsc#1251271). * CVE-2025-58148: incorrect input sanitisation in Viridian hypercalls using any input format can lead to out-of-bounds read through `send_ipi()` (bsc#1251271). * CVE-2025-58149: incorrect removal of permissions on PCI device unplug allows

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2026-12=1 openSUSE-SLE-15.6-2026-12=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2026-12=1 * Server Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2026-12=1 * SUSE Linux Enterprise Server 15 SP6 LTSS zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-12=1 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-12=1

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-12=1 openSUSE-SLE-15.6-2026-12=1

* Basesystem Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2026-12=1

* Server Applications Module 15-SP6

zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2026-12=1

* SUSE Linux Enterprise Server 15 SP6 LTSS

zypper in -t patch SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-12=1

* SUSE Linux Enterprise Server for SAP Applications 15 SP6

zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP6-2026-12=1

* openSUSE Leap 15.6 (aarch64 x86_64 i586) * xen-devel-4.18.5_08-150600.3.34.2 * xen-libs-debuginfo-4.18.5_08-150600.3.34.2 * xen-tools-domU-debuginfo-4.18.5_08-150600.3.34.2 * xen-tools-domU-4.18.5_08-150600.3.34.2 * xen-debugsource-4.18.5_08-150600.3.34.2 * xen-libs-4.18.5_08-150600.3.34.2 * openSUSE Leap 15.6 (x86_64) * xen-libs-32bit-debuginfo-4.18.5_08-150600.3.34.2 * xen-libs-32bit-4.18.5_08-150600.3.34.2 * openSUSE Leap 15.6 (aarch64 x86_64) * xen-4.18.5_08-150600.3.34.2 * xen-doc-html-4.18.5_08-150600.3.34.2 * xen-tools-debuginfo-4.18.5_08-150600.3.34.2 * xen-tools-4.18.5_08-150600.3.34.2 * openSUSE Leap 15.6 (noarch) * xen-tools-xendomains-wait-disk-4.18.5_08-150600.3.34.2 * openSUSE Leap 15.6 (aarch64_ilp32) * xen-libs-64bit-4.18.5_08-150600.3.34.2 * xen-libs-64bit-debuginfo-4.18.5_08-150600.3.34.2 * Basesystem Module 15-SP6 (x86_64) * xen-libs-debuginfo-4.18.5_08-150600.3.34.2 * Read the Full Advisory

* openSUSE Leap 15.6 (aarch64 x86_64 i586)

* xen-devel-4.18.5_08-150600.3.34.2

* xen-libs-debuginfo-4.18.5_08-150600.3.34.2

* xen-tools-domU-debuginfo-4.18.5_08-150600.3.34.2

* xen-tools-domU-4.18.5_08-150600.3.34.2

* xen-debugsource-4.18.5_08-150600.3.34.2

* xen-libs-4.18.5_08-150600.3.34.2

* openSUSE Leap 15.6 (x86_64)

* xen-libs-32bit-debuginfo-4.18.5_08-150600.3.34.2

* xen-libs-32bit-4.18.5_08-150600.3.34.2

* openSUSE Leap 15.6 (aarch64 x86_64)

* xen-4.18.5_08-150600.3.34.2

* xen-doc-html-4.18.5_08-150600.3.34.2

* xen-tools-debuginfo-4.18.5_08-150600.3.34.2

* xen-tools-4.18.5_08-150600.3.34.2

* openSUSE Leap 15.6 (noarch)

* xen-tools-xendomains-wait-disk-4.18.5_08-150600.3.34.2

* openSUSE Leap 15.6 (aarch64_ilp32)

* xen-libs-64bit-4.18.5_08-150600.3.34.2

* xen-libs-64bit-debuginfo-4.18.5_08-150600.3.34.2

* Basesystem Module 15-SP6 (x86_64)

* xen-libs-debuginfo-4.18.5_08-150600.3.34.2

* bsc#1027519 * bsc#1248807 * bsc#1251271 * bsc#1252692 * bsc#1254180 ## References: * * * * * * * * * * *

*

*

*

*

*

*

*

*

*

*

*