SUSE update for xen



Published: 2022-06-24
Risk High
Patch available YES
Number of vulnerabilities 9
CVE-ID CVE-2022-26356
CVE-2022-26357
CVE-2022-26358
CVE-2022-26359
CVE-2022-26360
CVE-2022-26361
CVE-2022-26362
CVE-2022-26363
CVE-2022-26364
CWE-ID CWE-401
CWE-362
CWE-400
CWE-119
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		SUSE Linux Enterprise Server for SAP
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing
Operating systems & Components / Operating system

SUSE Enterprise Storage
Operating systems & Components / Operating system

SUSE CaaS Platform
Operating systems & Components / Operating system

SUSE Linux Enterprise Server
Operating systems & Components / Operating system

xen-tools-domU-debuginfo
Operating systems & Components / Operating system package or component

xen-tools-domU
Operating systems & Components / Operating system package or component

xen-tools-debuginfo
Operating systems & Components / Operating system package or component

xen-tools
Operating systems & Components / Operating system package or component

xen-libs-debuginfo
Operating systems & Components / Operating system package or component

xen-libs
Operating systems & Components / Operating system package or component

xen-devel
Operating systems & Components / Operating system package or component

xen-debugsource
Operating systems & Components / Operating system package or component

xen
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 9 vulnerabilities.

1) Memory leak

EUVDB-ID: #VU63435

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26356

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists due to racy interactions between dirty vram tracking and paging log dirty hypercalls. A local user can force the application to leak memory and perform denial of service attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Race condition

EUVDB-ID: #VU63438

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26357

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the VT-d domain ID cleanup. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource exhaustion

EUVDB-ID: #VU63439

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26358

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Resource exhaustion

EUVDB-ID: #VU63440

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26359

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Resource exhaustion

EUVDB-ID: #VU63441

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26360

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Resource exhaustion

EUVDB-ID: #VU63442

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26361

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Race condition

EUVDB-ID: #VU64446

Risk: High

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26362

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to race condition in typeref acquisition Xen. A remote attacker can execute arbitrary code on the target system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Buffer overflow

EUVDB-ID: #VU64448

Risk: High

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26363

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient care with non-coherent mappings. A remote attacker can pass a specially crafted data and trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Buffer overflow

EUVDB-ID: #VU64447

Risk: High

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26364

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient care with non-coherent mappings. A remote attacker can pass a specially crafted data and trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP1

SUSE Linux Enterprise High Performance Computing: 15-SP1-ESPOS - 15-SP1-LTSS

SUSE Enterprise Storage: 6

SUSE CaaS Platform: 4.0

SUSE Linux Enterprise Server: 15-SP1-BCL - 15-SP1-LTSS

xen-tools-domU-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools-domU: before 4.12.4_24-150100.3.72.1

xen-tools-debuginfo: before 4.12.4_24-150100.3.72.1

xen-tools: before 4.12.4_24-150100.3.72.1

xen-libs-debuginfo: before 4.12.4_24-150100.3.72.1

xen-libs: before 4.12.4_24-150100.3.72.1

xen-devel: before 4.12.4_24-150100.3.72.1

xen-debugsource: before 4.12.4_24-150100.3.72.1

xen: before 4.12.4_24-150100.3.72.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###