Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:2654-1 Final 1 1 2024-07-30T13:33:35Z current 2024-07-30T13:33:35Z 2024-07-30T13:33:35Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: - CVE-2023-46842: Fixed x86 HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984). - CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-SP5-Azure-3P-2024-2654,Image SLES15-SP5-Azure-Basic-2024-2654,Image SLES15-SP5-Azure-Standard-2024-2654,Image SLES15-SP5-BYOS-Azure-2024-2654,Image SLES15-SP5-BYOS-EC2-2024-2654,Image SLES15-SP5-BYOS-GCE-2024-2654,Image SLES15-SP5-CHOST-BYOS-Aliyun-2024-2654,Image SLES15-SP5-CHOST-BYOS-Azure-2024-2654,Image SLES15-SP5-CHOST-BYOS-EC2-2024-2654,Image SLES15-SP5-CHOST-BYOS-GCE-2024-2654,Image SLES15-SP5-CHOST-BYOS-GDC-2024-2654,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2024-2654,Image SLES15-SP5-EC2-2024-2654,Image SLES15-SP5-GCE-2024-2654,Image SLES15-SP5-HPC-Azure-2024-2654,Image SLES15-SP5-HPC-BYOS-Azure-2024-2654,Image SLES15-SP5-HPC-BYOS-EC2-2024-2654,Image SLES15-SP5-HPC-BYOS-GCE-2024-2654,Image SLES15-SP5-Hardened-BYOS-Azure-2024-2654,Image SLES15-SP5-Hardened-BYOS-EC2-2024-2654,Image SLES15-SP5-Hardened-BYOS-GCE-2024-2654,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-2024-2654,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure-2024-2654,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2-2024-2654,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE-2024-2654,Image SLES15-SP5-Manager-Server-5-0-2024-2654,Image SLES15-SP5-Manager-Server-5-0-Azure-llc-2024-2654,Image SLES15-SP5-Manager-Server-5-0-Azure-ltd-2024-2654,Image SLES15-SP5-Manager-Server-5-0-BYOS-2024-2654,Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure-2024-2654,Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2-2024-2654,Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE-2024-2654,Image SLES15-SP5-Manager-Server-5-0-EC2-llc-2024-2654,Image SLES15-SP5-Manager-Server-5-0-EC2-ltd-2024-2654,Image SLES15-SP5-Micro-5-5-2024-2654,Image SLES15-SP5-Micro-5-5-Azure-2024-2654,Image SLES15-SP5-Micro-5-5-BYOS-2024-2654,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2024-2654,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2024-2654,Image SLES15-SP5-Micro-5-5-BYOS-GCE-2024-2654,Image SLES15-SP5-Micro-5-5-EC2-2024-2654,Image SLES15-SP5-Micro-5-5-GCE-2024-2654,Image SLES15-SP5-SAP-Azure-3P-2024-2654,Image SLES15-SP5-SAP-Azure-LI-BYOS-2024-2654,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2024-2654,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2024-2654,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2024-2654,Image SLES15-SP5-SAP-BYOS-Azure-2024-2654,Image SLES15-SP5-SAP-BYOS-EC2-2024-2654,Image SLES15-SP5-SAP-BYOS-GCE-2024-2654,Image SLES15-SP5-SAP-Hardened-Azure-2024-2654,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2024-2654,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2024-2654,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2024-2654,Image SLES15-SP5-SAP-Hardened-GCE-2024-2654,Image SLES15-SP5-SAPCAL-Azure-2024-2654,Image SLES15-SP5-SAPCAL-EC2-2024-2654,Image SLES15-SP5-SAPCAL-GCE-2024-2654,SUSE-2024-2654,SUSE-SLE-Micro-5.5-2024-2654,SUSE-SLE-Module-Basesystem-15-SP5-2024-2654,SUSE-SLE-Module-Server-Applications-15-SP5-2024-2654,openSUSE-Leap-Micro-5.5-2024-2654,openSUSE-SLE-15.5-2024-2654 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20242654-1/ Link for SUSE-SU-2024:2654-1 https://lists.suse.com/pipermail/sle-updates/2024-July/036194.html E-Mail link for SUSE-SU-2024:2654-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1027519 SUSE Bug 1027519 https://bugzilla.suse.com/1214718 SUSE Bug 1214718 https://bugzilla.suse.com/1221984 SUSE Bug 1221984 https://bugzilla.suse.com/1227355 SUSE Bug 1227355 https://www.suse.com/security/cve/CVE-2023-46842/ SUSE CVE CVE-2023-46842 page https://www.suse.com/security/cve/CVE-2024-31143/ SUSE CVE CVE-2024-31143 page Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0 Image SLES15-SP5-Manager-Server-5-0-Azure-llc Image SLES15-SP5-Manager-Server-5-0-Azure-ltd Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-EC2-llc Image SLES15-SP5-Manager-Server-5-0-EC2-ltd Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 openSUSE Leap 15.5 openSUSE Leap Micro 5.5 xen-libs-4.17.4_04-150500.3.33.1 xen-tools-domU-4.17.4_04-150500.3.33.1 xen-4.17.4_04-150500.3.33.1 xen-devel-4.17.4_04-150500.3.33.1 xen-doc-html-4.17.4_04-150500.3.33.1 xen-libs-32bit-4.17.4_04-150500.3.33.1 xen-libs-64bit-4.17.4_04-150500.3.33.1 xen-tools-4.17.4_04-150500.3.33.1 xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Azure-3P xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Azure-Basic xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Azure-Standard xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-Aliyun xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-GDC xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-HPC-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-llc xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-ltd xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-llc xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-llc xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-ltd xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-ltd xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-Micro-5-5-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Azure-3P xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAPCAL-Azure xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAPCAL-EC2 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAPCAL-EC2 xen-libs-4.17.4_04-150500.3.33.1 as a component of Image SLES15-SP5-SAPCAL-GCE xen-libs-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Micro 5.5 xen-libs-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 xen-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 xen-devel-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 xen-tools-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 xen-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-devel-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-doc-html-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-libs-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-libs-32bit-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-tools-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-tools-domU-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap 15.5 xen-libs-4.17.4_04-150500.3.33.1 as a component of openSUSE Leap Micro 5.5 Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit-mode hypercall arguments to values outside of the range 32-bit code would be able to set them to. When processing of hypercalls takes a considerable amount of time, the hypervisor may choose to invoke a hypercall continuation. Doing so involves putting (perhaps updated) hypercall arguments in respective registers. For guests not running in 64-bit mode this further involves a certain amount of translation of the values. Unfortunately internal sanity checking of these translated values assumes high halves of registers to always be clear when invoking a hypercall. When this is found not to be the case, it triggers a consistency check in the hypervisor and causes a crash. CVE-2023-46842 Image SLES15-SP5-Azure-3P:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Azure-Basic:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Azure-Standard:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-GDC:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-Azure-llc:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-Azure-ltd:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-3P:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-GCE:xen-libs-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Micro 5.5:xen-libs-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:xen-libs-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:xen-tools-domU-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-devel-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-tools-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-devel-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-doc-html-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-libs-32bit-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-libs-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-tools-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-tools-domU-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 openSUSE Leap Micro 5.5:xen-libs-4.17.4_04-150500.3.33.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242654-1/ https://www.suse.com/security/cve/CVE-2023-46842.html CVE-2023-46842 https://bugzilla.suse.com/1221984 SUSE Bug 1221984 An optional feature of PCI MSI called "Multiple Message" allows a device to use multiple consecutive interrupt vectors. Unlike for MSI-X, the setting up of these consecutive vectors needs to happen all in one go. In this handling an error path could be taken in different situations, with or without a particular lock held. This error path wrongly releases the lock even when it is not currently held. CVE-2024-31143 Image SLES15-SP5-Azure-3P:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Azure-Basic:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Azure-Standard:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-GDC:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-HPC-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Hardened-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-Azure-llc:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-Azure-ltd:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Manager-Server-5-0:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-Micro-5-5:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-3P:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAP-Hardened-GCE:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-Azure:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-EC2:xen-libs-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-EC2:xen-tools-domU-4.17.4_04-150500.3.33.1 Image SLES15-SP5-SAPCAL-GCE:xen-libs-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Micro 5.5:xen-libs-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:xen-libs-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Basesystem 15 SP5:xen-tools-domU-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-devel-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-tools-4.17.4_04-150500.3.33.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-devel-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-doc-html-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-libs-32bit-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-libs-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-tools-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-tools-domU-4.17.4_04-150500.3.33.1 openSUSE Leap 15.5:xen-tools-xendomains-wait-disk-4.17.4_04-150500.3.33.1 openSUSE Leap Micro 5.5:xen-libs-4.17.4_04-150500.3.33.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242654-1/ https://www.suse.com/security/cve/CVE-2024-31143.html CVE-2024-31143 https://bugzilla.suse.com/1227355 SUSE Bug 1227355