Linuxsecurity openSUSE Releases Important Xen Patches for Multiple Vulnerabilities
Article Content
- •openSUSE released critical patches for Xen vulnerabilities on June 10, 2026.
- •The vulnerabilities include CVE-2026-42487, CVE-2026-42488, CVE-2026-42489, and CVE-2026-42490.
- •Administrators are urged to apply the patches immediately to secure affected systems.
On June 10, 2026, openSUSE released updates addressing critical vulnerabilities in Xen, specifically CVE-2026-42487, CVE-2026-42488, CVE-2026-42489, and CVE-2026-42490. These vulnerabilities include issues such as x86 HVM I/O port list traversal and mismatched mapcache metadata, which could allow for unauthorized access and potential abuse of domctl locks. The vulnerabilities affect systems utilizing the Xen hypervisor, with CVSS scores ranging from 5.3 to 8.8, indicating varying levels of severity. The updates are crucial for maintaining the security of affected systems, and administrators are urged to apply the patches promptly to mitigate risks. The release includes two separate advisories, SUSE-2026-2328 and SUSE-2026-2329, both issued on the same day.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track CVE-2026-42487 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…