Skip to main content

Suse EUVDEUVD-2026-49770

| CVE-2026-42493 HIGH
Uncontrolled Resource Consumption (CWE-400)
2026-07-28 security@xen.org GHSA-7jxp-562x-944j
Denial Of Service Suse
7.5
CVSS 3.1 · Vendor: xen
Share

Severity by source

Vendor (xen) PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SUSE
5.9 MEDIUM
AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H

Primary rating from Vendor (xen).

CVSS VectorVendor: xen

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 28, 2026 - 16:32 vuln.today
CVSS changed
Jul 28, 2026 - 16:22 NVD
7.5 (HIGH)
CVE Published
Jul 28, 2026 - 13:18 cve.org
HIGH 7.5
CVE Published
Jul 28, 2026 - 13:18 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives (HVM/PVH: HAP, PV: shim) are commonly available, the decision was to deprecate the functionality, while still retaining it for people to use at their own (security) risk. Memory-wise small enough guests may still be okay to run.

AnalysisAI

Denial of service in Xen hypervisor running PV guests without hardware-assisted paging (HAP) or shim allows a malicious guest or remote attacker to monopolize CPU via long-running shadow paging operations, impacting host availability. This issue has been deprecated rather than patched, as modern alternatives (HAP, PVH, shim) eliminate

Same weakness CWE-400 – Uncontrolled Resource Consumption

View all
CVE-2023-44487 HIGH POC
7.5
CVE-2026-45498 HIGH POC
7.5
CVE-2016-8610 HIGH
7.5
CVE-2026-28318 HIGH POC
7.5
CVE-2023-38180 HIGH
7.5
CVE-2025-26673 HIGH
7.5
CVE-2015-7978 HIGH
7.5
CVE-2025-27473 HIGH
7.5

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS Fixed
SUSE Linux Enterprise Micro 5.3 Fixed

Share

EUVD-2026-49770 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy