CVE-2026-23554

Name of the Vulnerable Software and Affected Versions Citrix XenServer version 8.4

Description The Intel EPT paging code includes an optimization that defers flushing of cached EPT state until the p2m lock is released. However, the freeing of paging structures is not deferred, potentially leading to stale entries pointing to memory regions not owned by the guest. This can allow access to unintended memory regions. The issue may allow privileged code in a guest virtual machine to compromise the host system.

Recommendations Update XenServer version 8.4 to the latest firmware or software. Verify all XenServer 8.4 hosts are patched.