Back Linuxsecurity SUSE 15 SP7 Xen Update Fixes Grant Copy Read and Write Flaws
Two serious PHP flaws could let an attacker run code without logging in. See which setups and PHP versions are affected ×
## This update for xen fixes the following issues: Security issue fixed: * CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663). Non security issue fixed: * Xen: Missing upstream bug fixes (bsc#1027519).
## This update for xen fixes the following issues: Security issue fixed: * CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663). Non security issue fixed: * Xen: Missing upstream bug fixes (bsc#1027519).
* CVE-2026-102703 ( SUSE ): 8.4
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-102703 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* CVE-2026-102704 ( SUSE ): 8.4
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
* CVE-2026-102704 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
* Basesystem Module 15-SP7
* Server Applications Module 15-SP7
* SUSE Linux Enterprise Desktop 15 SP7
* SUSE Linux Enterprise Real Time 15 SP7
* SUSE Linux Enterprise Server 15 SP7
* SUSE Linux Enterprise Server for SAP Applications 15 SP7
An update that solves two vulnerabilities can now be installed.
Announcement ID: SUSE-SU-2026:5087-1 Release Date: 2026-11-03T13:45:04Z Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
