VDB
SUSE-SU-2023%3A3895-1
SUSE-SU-2023%3A3895-1
PUBLISHED
CVSS 7.5 HIGH
This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). - CVE-2023-20593: Fixed AMD Zenbleed (XSA-433) (bsc#1213616). - CVE-2022-40982: Fixed Intel Gather Data Sampling (XSA-435) (bsc#1214083).
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SUSE Linux Enterprise High Performance Computing 15 SP2 | ||
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | ||
| xen | ||
| SUSE Linux Enterprise Server 15 SP2-LTSS |
Timeline
- Sep 29, 2023 CVE Published
- Oct 4, 2026 CVE Updated
References
- https://www.suse.com/support/security/rating/ url
- https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3895-1.json advisory
- https://www.suse.com/support/update/announcement/2023/suse-su-20233895-1/ advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-September/016463.html advisory
- https://bugzilla.suse.com/1213616 advisory
- https://bugzilla.suse.com/1214083 advisory
- https://bugzilla.suse.com/1215145 advisory
- https://bugzilla.suse.com/1215474 advisory
- https://www.suse.com/security/cve/CVE-2022-40982/ advisory
- https://www.suse.com/security/cve/CVE-2023-20588/ advisory
- https://www.suse.com/security/cve/CVE-2023-20593/ advisory
- https://www.suse.com/security/cve/CVE-2023-34322/ advisory