Linuxsecurity Critical Vulnerabilities in openSUSE Xen Affecting Multiple Versions
Article Content
- •Three critical vulnerabilities in Xen affect openSUSE and SUSE Linux systems.
- •CVE-2025-54505 has a CVSS score of 6.9, while CVE-2026-23558 scores 7.3.
- •Users are advised to update their systems immediately to mitigate these vulnerabilities.
Recent updates for openSUSE have addressed multiple vulnerabilities in Xen, specifically CVE-2025-54505, CVE-2026-23557, and CVE-2026-23558. CVE-2025-54505 involves floating point divider state sampling on AMD CPUs, with a CVSS score of 6.9. CVE-2026-23557 allows for a denial of service (DoS) via the XS_RESET_WATCHES command, rated at 6.5. CVE-2026-23558 presents a race condition in grant table v2 status page mapping, with a higher severity score of 7.3. Affected systems include openSUSE Leap 15.3 and SUSE Linux Enterprise Micro 5.2. The vulnerabilities were disclosed recently, with CVE-2025-54505 published on April 27, 2026, and a proof of concept available since April 19, 2026. Users are urged to apply the latest patches to mitigate these risks. The vulnerabilities could potentially allow attackers to exploit systems running vulnerable versions of Xen.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track OpenSUSE and CVE-2025-54505 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include… 
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…