xen (SUSE:Linux Enterprise Real Time 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Real Time 15 SP3 package xen, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (5)

• CVE-2022-42333 — CVSS 8.6 (high): x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which…
• CVE-2022-42332 — CVSS 7.8 (high): x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted…
• CVE-2022-42334 — CVSS 6.5 (medium): x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which…
• CVE-2022-23824 — CVSS 5.5 (medium): IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information…
• CVE-2022-42331 — CVSS 5.5 (medium): x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one…