PT-2026-26014 · Intel+1 · Intel Ept+1

Roger Pau · Publicado 2026-01-01 · Atualizado 2026-03-28 · CVE-2026-23554

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix XenServer version 8.4

Description The Intel EPT paging code includes an optimization that defers flushing of cached EPT state until the p2m lock is released. However, the freeing of paging structures is not deferred, potentially leading to stale entries pointing to memory regions not owned by the guest. This can allow access to unintended memory regions. The issue may allow privileged code in a guest virtual machine to compromise the host system.

Recommendations Update XenServer version 8.4 to the latest firmware or software. Verify all XenServer 8.4 hosts are patched.

Correção

Time Of Check To Time Of Use

Enumeração de Fraquezas

CWE-367

Identificadores relacionados

CVE-2026-23554

MGASA-2026-0068

OPENSUSE-SU-2026:10457-1

SUSE-SU-2026:0908-1

SUSE-SU-2026:1092-1

SUSE-SU-2026:1093-1

Produtos afetados

Citrix Xenserver 8.4

Intel Ept

Referências · 33

• https://security-tracker.debian.org/tracker/CVE-2026-23554 · Aviso do Fabricante
• https://twitter.com/vuldb/status/2034186584573329455 · Publicação no Twitter
• https://twitter.com/oss_security/status/2033992522700079565 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2026-23555 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=35222 · Nota
• https://suse.com/support/update/announcement/2026/suse-su-20261092-1 · Nota
• https://ubuntu.com/security/CVE-2026-23554 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2026/suse-su-20261093-1 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23554 · Aviso do Fabricante
• https://advisories.mageia.org/MGASA-2026-0068.html · Nota de Segurança
• https://xenbits.xenproject.org/xsa/advisory-480.html · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2026-23554 · Nota
• https://osv.dev/vulnerability/MGASA-2026-0068 · Aviso do Fabricante
• https://twitter.com/CVEarity/status/2036123772051415439 · Publicação no Twitter
• https://bugzilla.suse.com/1259247 · Nota