XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag 诊断工具 — CVE-2026-43284 一个社区诊断工具，用于判断 XCP-ng dom0 主机是否暴露于 CVE-2026-43284 （“Dirty Frag”），这是 Linux 内核 xfrm-ESP 子系统中的一个本地权限提升漏洞。 TL;DR — 所有当前 XCP-ng 版本（8.1、8.2、8.3）运行标准 4.19 dom0 内核的都在受影响代码范围内。截至 2026 年 5 月，官方尚未发布 XCP-ng 补丁。本工具能明确告知您的主机是否暴露，并提供安全的临时缓解措施。 背景 “Dirty Frag”...

Hotfix XS82E034 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| Restart Host Content live patchable| Yes Baselines for Live Patch| XS82E024, XS82E030 Revision History|...

grant table hypercall acquire/release imbalance

ISSUE DESCRIPTION When releasing a non-v1 non-transitive grant after doing a grant copy operation, Xen incorrectly recurses as if for a transitive grant and releases an unrelated grant reference. IMPACT A malicious guest administrator can cause undefined behaviour; depending on the dom0 kernel a...