Back Linuxsecurity

SUSE Xen Important Buffer Overflow Fixes for 2026-3423

Linuxsecurity •LinuxSecurity Advisories • July 30, 2026

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

## This update for xen fixes the following issues * CVE-2026-42493: x86 shadow paging is deprecated (bsc#1271528). * CVE-2026-42494,CVE-2026-42495,CVE-2026-62423,CVE-2026-62424,CVE-2026-62425: buffer overruns in libfsimage iso9660 handling (bsc#1271530). * CVE-2026-62426,CVE-2026-62427: sysctl and platform-op locks open to abuse (bsc#1271531). * CVE-2026-62428: grant-table: type confusion in grant-copy (bsc#1271532). * CVE-2026-62429: vNUMA domain cleanup may race other operations (bsc#1271534). * CVE-2026-62430: x86: Out-of-bounds read in vRTC emulation (bsc#1271535). * CVE-2026-62431: Viridian STIMER division by zero (bsc#1271536). * CVE-2026-62432: evtchn: Race between FIFO expand and reset (bsc#1271537).

* CVE-2026-42493 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

* CVE-2026-42493 ( SUSE ): 5.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

* CVE-2026-42493 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

* CVE-2026-42494 ( SUSE ): 8.9

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Announcement ID: SUSE-SU-2026:3423-1 Release Date: 2026-07-30T07:50:01Z Rating: important

Get the latest Linux and open source security news straight to your inbox.

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.