Linuxsecurity

SUSE Releases Security Update for Xen CVE-2025-58149

First seen 19 Dec 2025, 22:56 UTC • Linuxsecurity

•85% similarity •34.4

Ask AI about this cluster

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

SUSE has issued a security update addressing CVE-2025-58149, which involves incorrect removal of permissions on PCI device unplug. This vulnerability allows PV guests to access memory of devices that are no longer assigned to them. The update applies to Xen versions 4.17.6 and 4.20.2, and users are advised to reboot their systems after installation.

ThreatCluster AI

Attack Flow

10 entities, 9 inferred relationships (STIX 2.1).

Vulnerability (1)

CVE-2025-58149

Affected Platform (9)

Basesystem Module 15-sp7
OpenSUSE Leap 15.5
Server Applications Module 15-sp7
SUSE Linux Enterprise Desktop 15 SP7
SUSE Linux Enterprise Micro 5.5
SUSE Linux Enterprise Real Time 15 SP7
SUSE Linux Enterprise Server 15 SP7
SUSE Linux Enterprise Server For SAP Applications 15 SP7
Xen

Relationships

CVE-2025-58149 targets Basesystem Module 15-sp7
CVE-2025-58149 targets OpenSUSE Leap 15.5
CVE-2025-58149 targets Server Applications Module 15-sp7
CVE-2025-58149 targets SUSE Linux Enterprise Desktop 15 SP7
CVE-2025-58149 related to SUSE Linux Enterprise Micro 5.5
CVE-2025-58149 related to SUSE Linux Enterprise Real Time 15 SP7
CVE-2025-58149 related to SUSE Linux Enterprise Server 15 SP7
CVE-2025-58149 related to SUSE Linux Enterprise Server For SAP Applications 15 SP7
CVE-2025-58149 related to Xen

Community

Browse all →

SUSE Releases Security Update for Xen CVE-2025-58149

Ask AI about this cluster

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Community

Continue Reading