# Citrix XenServer 8.4/9 Vulnerabilities Enabling Host Compromise (CVE-2026-79610, CVE-2026-102700, CVE-2026-102701, CVE-2026-79611)

> Cloud Software Group patched four high-severity vulnerabilities in XenServer 8.4 and XenServer 9 (bulletin CTX697170, 2026-10-13), corresponding to Xen advisories XSA-517, XSA-518, XSA-520 and XSA-521. Three can let a privileged guest user compromise or crash the host; one lets an unprivileged guest user crash its own VM. No exploitation, PoC or KEV listing has been reported.

- **Published:** 2026-10-16T01:05:34Z
- **Last reviewed:** 2026-10-16T01:05:34Z
- **Canonical:** https://intel.threadlinqs.com/threat/TL-2026-3686
- **ID:** TL-2026-3686
- **Severity:** HIGH (CVSS 8.8)
- **Category:** VULNERABILITY
- **Status:** PATCHED
- **Detections:** 9 · **IOCs:** 8 (full data via the Threadlinqs MCP server — Purple tier)
- **CVEs:** CVE-2026-79610, CVE-2026-102700, CVE-2026-102701, CVE-2026-79611

## Description

Citrix (Cloud Software Group) bulletin CTX697170, initially published 2026-10-13, covers four vulnerabilities in XenServer 8.4 and XenServer 9, all rated High by the vendor. CVE-2026-79610, CVE-2026-102700 and CVE-2026-102701 allow a malicious privileged user inside a guest VM to compromise or crash the host; CVE-2026-102700 affects XenServer 8.4 only. CVE-2026-79611 lets an unprivileged guest user crash the same guest VM. Fixes were pushed to the Early Access and Normal update channels for both XenServer 8.4 and 9. The bulletin gives no CVSS, CWE, root cause, credits or workarounds.

The upstream Xen Project advisories published 2026-10-13 12:00 UTC supply the technical detail. CVE-2026-79610 (XSA-517, 'grant-table: double version change race') follows the earlier partial fix in XSA-501: a v2 -> v1 -> v2 grant table version change frees the status pages during the first change and allocates them again during the second, leaving stale pointers into the status array. Xen says an unprivileged guest may be able to elevate its privileges to those of the host, with information disclosure and denial of service also possible. It affects Xen 4.0 and later, x86 guests using grant table v2, multi-vCPU guests only, and hypervisors built with CONFIG_GRANT_TABLE. Workarounds are the hypervisor command-line option gnttab=max-ver:1 or the guest option max_grant_version=1.

CVE-2026-102700 (XSA-520, 'gnttab: cache-flush handling may cause page reference leak') is a flaw in the GNTTABOP_cache_flush error path. The XSA-232 fix added a NULL check but did not drop the page reference when the page belongs to special domains such as DOM_IO or DOM_COW. The most likely outcome is denial of service of Domain 0 (and so likely the whole host) or of another domain. It affects x86 Xen 4.5 through 4.20 and has no known mitigation; Andrew Cooper (Citrix) and Yehyeong Lee found it independently.

CVE-2026-102701 (XSA-521, 'tapdisk: Out-of-bounds access in tap_ctl_connect_xenblkif()') is in tapdisk, the userspace xen-blkback implementation used by the XAPI toolstack. Multi-page ring negotiation has no bounds check on the ring size requested by the frontend and assumes it does not exceed 8. A faulty or hostile guest can trigger a stack overflow, potentially giving arbitrary code execution, and tapdisk normally runs as root. All tapdisk versions are affected and there is no mitigation before patching.

CVE-2026-79611 (XSA-518, 'VMX: VMentry failure with branch tracing and blocked states') builds on XSA-308: a sub-case with branch tracing enabled bypasses the earlier protection against problematic CPU states at VMX entry (debug traps intercepted with single-stepping and STI/MovSS blocking). HVM/PVH guest userspace can crash the guest. Only Intel, VIA and Zhaoxin VMX systems are affected; PV guests, AMD, Hygon and Arm are not. Mitigation is to run only PV guests or to run HVM guests on AMD/Hygon hardware.

XSA-517, XSA-518 and XSA-521 credit discovery to Claude Opus, with Teddy Astie (Vates) identifying the security implications. SUSE rated its Xen update SUSE-SU-2026:4642-1 (2026-10-13) Important and listed CVSS v4.0 9.3 (v3.1 8.8) for CVE-2026-79610, 6.8 (v4.0) for CVE-2026-79611 and 5.7 (v4.0) / 4.7 (v3.1) for CVE-2026-102700. The cvss_score recorded here is that SUSE v3.1 value for CVE-2026-79610, since the Citrix bulletin gives none. Risk is highest in multi-tenant and hosting environments where guest administrators are not vetted, because host compromise can expose other tenants' workloads. No active exploitation, public PoC, KEV listing or attribution has been reported (EPSS for CVE-2026-79610 is about 0.18%). No network IOCs exist; the IOCs below are patch artifacts, affected components and configuration indicators. CWE mappings are analyst-assigned from the advisory descriptions, not stated by the vendor.

## MITRE ATT&CK

- T1611 Escape to Host
- T1499.004 Application or System Exploitation
- T1078 Valid Accounts

## Sources

- [Citrix XenServer Security Update CTX697170](https://support.citrix.com/external/article/CTX697170)
- [Xen XSA-517 - grant-table: double version change race (CVE-2026-79610)](https://xenbits.xen.org/xsa/advisory-517.html)
- [Xen XSA-518 - VMX: VMentry failure with branch tracing and blocked states (CVE-2026-79611)](https://xenbits.xen.org/xsa/advisory-518.html)
- [Xen XSA-520 - gnttab: cache-flush handling may cause page reference leak (CVE-2026-102700)](https://xenbits.xen.org/xsa/advisory-520.html)
- [Xen XSA-521 - tapdisk: Out-of-bounds access in tap_ctl_connect_xenblkif() (CVE-2026-102701)](https://xenbits.xen.org/xsa/advisory-521.html)
- [Xen Security Advisories index](https://xenbits.xen.org/xsa/)
- [SUSE-SU-2026:4642-1 Xen security update](https://linuxsecurity.com/advisories/suse/suse-2026-4642-1-xen)
- [CVE-2026-79610 entry (thehackerwire)](https://www.thehackerwire.com/vulnerability/CVE-2026-79610/)
- [Citrix Patches XenServer Vulnerabilities That Could Enable Host Compromise (GBHackers)](https://gbhackers.com/citrix-xenserver-uniconos-vulnerabilities/)

## Full data

Detection queries (Splunk SPL / Microsoft KQL / Sigma) and IOC values require the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp

Canonical: https://intel.threadlinqs.com/threat/TL-2026-3686