SUSE-SU-2026:5087-1: Security update for xen
This update for xen fixes the following issues:
Security issue fixed:
- CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663).
Non security issue fixed:
- Xen: Missing upstream bug fixes (bsc#1027519).
Other sources
This update for xen fixes the following issues: Security issue fixed: CVE-2026-102703,CVE-2026-102704: arbitrary read/write via grant copy (bsc#1288663). Non security issue fixed: Xen: Missing upstream bug fixes (bsc#1027519).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/xento a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-debugsourceto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-tools-domU-debuginfoto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-libsto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-tools-domUto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-libs-debuginfoto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-toolsto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-tools-debuginfoto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-develto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
suse/xen-tools-xendomains-wait-diskto a version that resolves this vulnerability.Fixed in 4.20.4_08-150700.3.52.1 - Upgrade
Upgrade
xento a version that resolves this vulnerability.Patch SUSE-SLE-Module-Basesystem-15-SP7-2026-5087 - Upgrade
Upgrade
xento a version that resolves this vulnerability.Patch SUSE-SLE-Module-Server-Applications-15-SP7-2026-5087
Event History
Frequently Asked Questions
Which systems are in scope for this update?
The update applies to x86_64 systems using the SUSE Basesystem Module 15-SP7 or SUSE Server Applications Module 15-SP7 with Xen packages installed. Listed package families include xen, xen-libs, xen-tools-domu, and their debug or debuginfo packages.
How can I identify systems that need review?
Inventory installed Xen-related packages, particularly xen, xen-libs, and xen-tools-domu, on systems subscribed to the affected SUSE 15-SP7 x86_64 modules. The advisory does not provide fixed package versions or other detection criteria.