Processor optimization removal or modification of security-critical code in Xen - CVE-2024-53241

Vulnerability identifier: #VU101817

CSH Severity: Low

CVSS v4 BT: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53241

CWE-ID: CWE-1037

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a malicious guest to gain access to sensitive information.

The vulnerability exists due to implemented mitigations for hardware vulnerabilities related to Xen hypercall page implementation the guest OS is relying on to work might not be fully functional, resulting in e.g. guest user processes being able to read data they ought not have access to.

Xen
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Availability Extension 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Workstation Extension 15
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for ARM 64
SUSE Linux Enterprise Live Patching
Public Cloud Module
Basesystem Module
Confidential Computing Module
Server Applications Module
Development Tools Module
Legacy Module
SUSE Real Time Module
openSUSE Leap
openEuler
SmartFabric Manager
IBM Qradar SIEM
Dell EMC VxRail Appliance
APEX Cloud Platform for Microsoft Azure
kernel-livepatch-5_14_21-150400_24_147-default
kernel-livepatch-SLE15-SP4_Update_35-debugsource
kernel-livepatch-5_14_21-150400_24_147-default-debuginfo
kernel-livepatch-SLE15-SP5_Update_22-debugsource
kernel-livepatch-5_14_21-150500_55_91-default
kernel-livepatch-5_14_21-150500_55_91-default-debuginfo
kernel-livepatch-6_4_0-150600_10_23-rt-debuginfo
kernel-livepatch-6_4_0-150600_10_23-rt
kernel-livepatch-SLE15-SP6-RT_Update_7-debugsource
kernel-livepatch-SLE15-SP6_Update_7-debugsource
kernel-livepatch-6_4_0-150600_23_33-default
kernel-livepatch-6_4_0-150600_23_33-default-debuginfo
xen-debugsource
xen-tools-domU-debuginfo
xen-libs
xen-libs-32bit
xen-tools-domU
xen-libs-32bit-debuginfo
xen-tools
xen
xen-tools-debuginfo
xen-doc-html
xen-tools-xendomains-wait-disk
xen-libs-64bit-debuginfo
xen-libs-64bit
xen-devel
xen-libs-debuginfo
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-tools-libs
kernel-tools-libs-devel
perf
python3-perf
kernel-abi-stablelists
kernel-doc
kernel-tools
kernel-modules
kernel-headers
bpftool
kernel
kernel-core
kernel-cross-headers
kernel-debug
kernel-debug-core
kernel-debug-devel
kernel-debug-modules
kernel-debug-modules-extra
kernel-devel
kernel-modules-extra
python3-perf-debuginfo
kernel-source
kernel-tools-debuginfo
kernel-tools-devel
perf-debuginfo
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
kernel-source-rt
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-rt
dlm-kmp-default-debuginfo
gfs2-kmp-default
kernel-default-extra
kernel-obs-build
cluster-md-kmp-default-debuginfo
gfs2-kmp-64kb
kernel-default
kernel-default-livepatch-devel
kernel-kvmsmall
kernel-zfcpdump
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
dtb-aarch64
cluster-md-kmp-64kb
kernel-kvmsmall-debugsource
kernel-default-optional-debuginfo
kernel-default-debugsource
kernel-kvmsmall-devel-debuginfo
kernel-syms
gfs2-kmp-default-debuginfo
kernel-obs-build-debugsource
reiserfs-kmp-default
kselftests-kmp-default-debuginfo
reiserfs-kmp-default-debuginfo
kernel-default-devel
kernel-obs-qa
kernel-default-extra-debuginfo
kernel-default-optional
kernel-default-livepatch
dlm-kmp-default
kernel-default-devel-debuginfo
ocfs2-kmp-default-debuginfo
cluster-md-kmp-default
ocfs2-kmp-default
kernel-default-debuginfo
kselftests-kmp-default
kernel-64kb-optional
ocfs2-kmp-64kb
dtb-broadcom
dtb-exynos
dtb-xilinx
dtb-marvell
kernel-64kb-debugsource
kselftests-kmp-64kb-debuginfo
kernel-64kb-devel
dtb-nvidia
dtb-rockchip
dtb-mediatek
kernel-64kb-devel-debuginfo
dtb-sprd
kernel-64kb-debuginfo
dtb-renesas
dtb-hisilicon
dtb-altera
dtb-socionext
dtb-amazon
kernel-64kb
kernel-64kb-extra
gfs2-kmp-64kb-debuginfo
reiserfs-kmp-64kb
kernel-64kb-extra-debuginfo
dtb-freescale
dtb-amd
dtb-amlogic
reiserfs-kmp-64kb-debuginfo
dlm-kmp-64kb-debuginfo
kselftests-kmp-64kb
dtb-apm
dtb-allwinner
dtb-qcom
dtb-arm
dlm-kmp-64kb
dtb-lg
kernel-64kb-optional-debuginfo
ocfs2-kmp-64kb-debuginfo
cluster-md-kmp-64kb-debuginfo
dtb-cavium
dtb-apple
kernel-kvmsmall-debuginfo
kernel-docs
kernel-kvmsmall-devel
kernel-debug-debuginfo
kernel-debug-debugsource
kernel-debug-devel-debuginfo
kernel-docs-html
kernel-source-vanilla
kernel-macros
kernel-default-base
kernel-default-base-rebuild
gfs2-kmp-rt
kernel-rt-livepatch-devel
kselftests-kmp-rt
reiserfs-kmp-rt-debuginfo
kernel-rt_debug-debugsource
reiserfs-kmp-rt
kernel-rt_debug-devel-debuginfo
kernel-rt-extra-debuginfo
dlm-kmp-rt
kselftests-kmp-rt-debuginfo
ocfs2-kmp-rt-debuginfo
dlm-kmp-rt-debuginfo
kernel-rt-devel
kernel-rt-vdso-debuginfo
kernel-rt-devel-debuginfo
kernel-rt_debug-vdso-debuginfo
cluster-md-kmp-rt-debuginfo
kernel-rt_debug
kernel-syms-rt
kernel-devel-rt
ocfs2-kmp-rt
kernel-rt_debug-vdso
gfs2-kmp-rt-debuginfo
kernel-rt-optional-debuginfo
kernel-rt_debug-debuginfo
kernel-rt-extra
kernel-rt-optional
kernel-rt_debug-devel
cluster-md-kmp-rt
kernel-rt-vdso
kernel-rt-livepatch
kernel-default-vdso
kernel-debug-vdso-debuginfo
kernel-kvmsmall-vdso-debuginfo
kernel-debug-vdso
kernel-kvmsmall-vdso
kernel-default-vdso-debuginfo
kernel-coco
kernel-coco_debug
kernel-coco-devel
kernel-coco-debugsource
kernel-coco_debug-devel
kernel-coco_debug-devel-debuginfo
kernel-coco-debuginfo
kernel-coco_debug-debuginfo
kernel-coco_debug-debugsource
reiserfs-kmp-coco
reiserfs-kmp-coco-debuginfo
kernel-syms-coco
kernel-coco-vdso-debuginfo
kernel-devel-coco
kernel-source-coco
cluster-md-kmp-azure-debuginfo
gfs2-kmp-azure
kernel-azure
kernel-azure-vdso
kernel-azure-vdso-debuginfo
kernel-source-azure
kernel-devel-azure
kernel-azure-extra-debuginfo
kernel-azure-debuginfo
ocfs2-kmp-azure-debuginfo
kernel-syms-azure
kernel-azure-extra
dlm-kmp-azure
kselftests-kmp-azure-debuginfo
kernel-azure-debugsource
ocfs2-kmp-azure
kselftests-kmp-azure
dlm-kmp-azure-debuginfo
kernel-azure-optional
reiserfs-kmp-azure
cluster-md-kmp-azure
reiserfs-kmp-azure-debuginfo
kernel-azure-devel-debuginfo
kernel-azure-optional-debuginfo
gfs2-kmp-azure-debuginfo
kernel-azure-devel
APEX Cloud Platform for Red Hat OpenShift
Red Hat OpenShift Container Platform

Install updates from vendor's website.

SmartFabric Manager - update to 1.2.0
IBM Qradar SIEM - update to 7.5.0 Update Pack 12 IF02
Dell EMC VxRail Appliance - update to 8.321
APEX Cloud Platform for Microsoft Azure - update to 01.04.01.00
kernel-livepatch-5_14_21-150400_24_147-default - update to 1-150400.9.3.1
kernel-livepatch-SLE15-SP4_Update_35-debugsource - update to 1-150400.9.3.1
kernel-livepatch-5_14_21-150400_24_147-default-debuginfo - update to 1-150400.9.3.1
kernel-livepatch-SLE15-SP5_Update_22-debugsource - update to 1-150500.11.3.1
kernel-livepatch-5_14_21-150500_55_91-default - update to 1-150500.11.3.1
kernel-livepatch-5_14_21-150500_55_91-default-debuginfo - update to 1-150500.11.3.1
kernel-livepatch-6_4_0-150600_10_23-rt-debuginfo - update to 1-150600.1.3.1
kernel-livepatch-6_4_0-150600_10_23-rt - update to 1-150600.1.3.1
kernel-livepatch-SLE15-SP6-RT_Update_7-debugsource - update to 1-150600.1.3.1
kernel-livepatch-SLE15-SP6_Update_7-debugsource - update to 1-150600.13.3.1
kernel-livepatch-6_4_0-150600_23_33-default - update to 1-150600.13.3.1
kernel-livepatch-6_4_0-150600_23_33-default-debuginfo - update to 1-150600.13.3.1
APEX Cloud Platform for Red Hat OpenShift - update to 03.02.04.00
xen-debugsource - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-tools-domU-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-libs - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-libs-32bit - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-tools-domU - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-libs-32bit-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-tools - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-tools-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-doc-html - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-tools-xendomains-wait-disk - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-libs-64bit-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-libs-64bit - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-devel - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
xen-libs-debuginfo - addressed in versions 4.14.6_24-150300.3.87.1, 4.17.5_08-150500.3.45.1, 4.18.4_02-150600.3.15.2
Red Hat OpenShift Container Platform - update to 4.15.50
kernel (Red Hat package) - update to 4.18.0-553.50.1.el8_10
kernel-rt (Red Hat package) - update to 4.18.0-553.50.1.rt7.391.el8_10
kernel-tools-libs - update to 4.18.0-553.50.1.0.1
kernel-tools-libs-devel - update to 4.18.0-553.50.1.0.1
perf - update to 4.18.0-553.50.1.0.1
python3-perf - update to 4.18.0-553.50.1.0.1
kernel-abi-stablelists - update to 4.18.0-553.50.1.0.1
kernel-doc - update to 4.18.0-553.50.1.0.1
kernel-tools - update to 4.18.0-553.50.1.0.1
kernel-modules - update to 4.18.0-553.50.1.0.1
kernel-headers - update to 4.18.0-553.50.1.0.1
bpftool - update to 4.18.0-553.50.1.0.1
kernel - update to 4.18.0-553.50.1.0.1
kernel-core - update to 4.18.0-553.50.1.0.1
kernel-cross-headers - update to 4.18.0-553.50.1.0.1
kernel-debug - update to 4.18.0-553.50.1.0.1
kernel-debug-core - update to 4.18.0-553.50.1.0.1
kernel-debug-devel - update to 4.18.0-553.50.1.0.1
kernel-debug-modules - update to 4.18.0-553.50.1.0.1
kernel-debug-modules-extra - update to 4.18.0-553.50.1.0.1
kernel-devel - update to 4.18.0-553.50.1.0.1
kernel-modules-extra - update to 4.18.0-553.50.1.0.1
python3-perf-debuginfo - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-devel - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-headers - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-source - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-tools - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-tools-debuginfo - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-tools-devel - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
perf - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
perf-debuginfo - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
python3-perf - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-debugsource - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-debuginfo - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel - addressed in versions 5.10.0-296.0.0.198, 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
bpftool - addressed in versions 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
bpftool-debuginfo - addressed in versions 5.10.0-296.0.0.199, 6.6.0-75.0.0.68, 6.6.0-75.0.0.79
kernel-source-rt - addressed in versions 5.14.21-150400.15.106.1, 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-debugsource - addressed in versions 5.14.21-150400.15.106.1, 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-debuginfo - addressed in versions 5.14.21-150400.15.106.1, 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt - addressed in versions 5.14.21-150400.15.106.1, 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
dlm-kmp-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
gfs2-kmp-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-extra - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-obs-build - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
cluster-md-kmp-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
gfs2-kmp-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-livepatch-devel - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-zfcpdump - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-zfcpdump-debugsource - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-zfcpdump-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-aarch64 - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
cluster-md-kmp-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall-debugsource - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-optional-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-debugsource - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall-devel-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-syms - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
gfs2-kmp-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-obs-build-debugsource - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
reiserfs-kmp-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kselftests-kmp-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
reiserfs-kmp-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-devel - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-obs-qa - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-extra-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-optional - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-livepatch - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dlm-kmp-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-devel-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
ocfs2-kmp-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
cluster-md-kmp-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
ocfs2-kmp-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kselftests-kmp-default - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-optional - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
ocfs2-kmp-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-broadcom - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-exynos - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-xilinx - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-marvell - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-debugsource - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kselftests-kmp-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-devel - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-nvidia - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-rockchip - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-mediatek - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-devel-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-sprd - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-renesas - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-hisilicon - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-altera - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-socionext - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-amazon - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-extra - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
gfs2-kmp-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
reiserfs-kmp-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-extra-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-freescale - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-amd - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-amlogic - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
reiserfs-kmp-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dlm-kmp-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kselftests-kmp-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-apm - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-allwinner - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-qcom - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-arm - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dlm-kmp-64kb - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-lg - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-64kb-optional-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
ocfs2-kmp-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
cluster-md-kmp-64kb-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-cavium - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
dtb-apple - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-docs - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall-devel - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug-devel - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug-debugsource - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug-devel-debuginfo - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-docs-html - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-source-vanilla - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-devel - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-macros - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-source - addressed in versions 5.14.21-150400.24.147.1, 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-base - addressed in versions 5.14.21-150400.24.147.1.150400.24.72.1, 5.14.21-150500.55.91.1.150500.6.41.1, 6.4.0-150600.23.33.1.150600.12.14.1
kernel-default-base-rebuild - addressed in versions 5.14.21-150400.24.147.1.150400.24.72.1, 5.14.21-150500.55.91.1.150500.6.41.1, 6.4.0-150600.23.33.1.150600.12.14.1
gfs2-kmp-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-livepatch-devel - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kselftests-kmp-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
reiserfs-kmp-rt-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug-debugsource - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
reiserfs-kmp-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug-devel-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-extra-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
dlm-kmp-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kselftests-kmp-rt-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
ocfs2-kmp-rt-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
dlm-kmp-rt-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-devel - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-vdso-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-devel-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug-vdso-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
cluster-md-kmp-rt-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-syms-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-devel-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
ocfs2-kmp-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug-vdso - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
gfs2-kmp-rt-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-optional-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug-debuginfo - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-extra - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-optional - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt_debug-devel - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
cluster-md-kmp-rt - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-vdso - addressed in versions 5.14.21-150500.13.82.1, 6.4.0-150600.10.23.1
kernel-rt-livepatch - update to 5.14.21-150500.13.82.1
kernel-default-vdso - addressed in versions 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug-vdso-debuginfo - addressed in versions 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall-vdso-debuginfo - addressed in versions 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-debug-vdso - addressed in versions 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-kvmsmall-vdso - addressed in versions 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-default-vdso-debuginfo - addressed in versions 5.14.21-150500.55.91.1, 6.4.0-150600.23.33.1
kernel-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-devel - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-debugsource - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-devel - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-devel-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco_debug-debugsource - update to 6.4.0-15061.12.coco15sp6.1
reiserfs-kmp-coco - update to 6.4.0-15061.12.coco15sp6.1
reiserfs-kmp-coco-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-syms-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-coco-vdso-debuginfo - update to 6.4.0-15061.12.coco15sp6.1
kernel-devel-coco - update to 6.4.0-15061.12.coco15sp6.1
kernel-source-coco - update to 6.4.0-15061.12.coco15sp6.1
cluster-md-kmp-azure-debuginfo - update to 6.4.0-150600.8.23.1
gfs2-kmp-azure - update to 6.4.0-150600.8.23.1
kernel-azure - update to 6.4.0-150600.8.23.1
kernel-azure-vdso - update to 6.4.0-150600.8.23.1
kernel-azure-vdso-debuginfo - update to 6.4.0-150600.8.23.1
kernel-source-azure - update to 6.4.0-150600.8.23.1
kernel-devel-azure - update to 6.4.0-150600.8.23.1
kernel-azure-extra-debuginfo - update to 6.4.0-150600.8.23.1
kernel-azure-debuginfo - update to 6.4.0-150600.8.23.1
ocfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.23.1
kernel-syms-azure - update to 6.4.0-150600.8.23.1
kernel-azure-extra - update to 6.4.0-150600.8.23.1
dlm-kmp-azure - update to 6.4.0-150600.8.23.1
kselftests-kmp-azure-debuginfo - update to 6.4.0-150600.8.23.1
kernel-azure-debugsource - update to 6.4.0-150600.8.23.1
ocfs2-kmp-azure - update to 6.4.0-150600.8.23.1
kselftests-kmp-azure - update to 6.4.0-150600.8.23.1
dlm-kmp-azure-debuginfo - update to 6.4.0-150600.8.23.1
kernel-azure-optional - update to 6.4.0-150600.8.23.1
reiserfs-kmp-azure - update to 6.4.0-150600.8.23.1
cluster-md-kmp-azure - update to 6.4.0-150600.8.23.1
reiserfs-kmp-azure-debuginfo - update to 6.4.0-150600.8.23.1
kernel-azure-devel-debuginfo - update to 6.4.0-150600.8.23.1
kernel-azure-optional-debuginfo - update to 6.4.0-150600.8.23.1
gfs2-kmp-azure-debuginfo - update to 6.4.0-150600.8.23.1
kernel-azure-devel - update to 6.4.0-150600.8.23.1

• https://xenbits.xen.org/xsa/advisory-466.html

• Information disclosure in Xen hypercall page implementation
• SUSE update for the Linux Kernel
• SUSE update for xen
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• openEuler 24.03 LTS update for kernel
• openEuler 24.03 LTS SP1 update for kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Dell SmartFabric Manager update for third-party components
• Dell VxRail Appliance 8.x update for third-party components
• Red Hat Enterprise Linux 8 update for kernel
• Red Hat Enterprise Linux 8 update for kernel-rt
• Anolis OS update for kernel:4.18
• Dell APEX Cloud Platform for Red Hat OpenShift update for third-party components
• Dell APEX Cloud Platform for Microsoft Azure update for third-party components
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• SUSE update for xen
• SUSE update for xen
• Multiple vulnerabilities in IBM QRadar SIEM
• openEuler 22.03 LTS SP4 update for kernel
• openEuler 22.03 LTS SP3 update for kernel