This update for xen fixes the following issues: Update to Xen 4.7.5 bug fix only release (bsc#1027519) Security issues fixed :

  - CVE-2018-7540: Fixed DoS via non-preemptable L3/L4     pagetable freeing (XSA-252) (bsc#1080635)

  - CVE-2018-7541: A grant table v2 -> v1 transition may     crash Xen (XSA-255) (bsc#1080662)

  - CVE-2017-5753,CVE-2017-5715,CVE-2017-5754 Fixed     information leaks via side effects of speculative     execution (XSA-254). Includes Spectre v2 mitigation.
    (bsc#1074562)

  - Preserve xen-syms from xen-dbg.gz to allow processing     vmcores with crash(1) (bsc#1087251)

  - Xen HVM: Fixed unchecked MSR access error (bsc#1072834)

  - Add script, udev rule and systemd service to watch for     vcpu online/offline events in a HVM domU They are     triggered via xl vcpu-set domU N (fate#324965)

  - Make sure tools and tools-domU require libs from the     very same build

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2018:0909-1) (Meltdown) (Spectre)

high Nessus Plugin ID 109001

Version 1.11

Version 1.10

Version 1.11 Jan 13, 2026, 11:35 AM Exploit attributes ("Exploit framework core" set to "True") Plugin Feed: 202601131135
Version 1.10 Nov 7, 2024, 8:52 AM CVSSv2 score source (set to "CVE-2018-7541") Plugin Feed: 202411070852