XenServer Security Update for CVE-2026-114406
CTX697257
Summary
This issue only affects certain AMD CPUs; customers who are running Intel-based systems are not affected by this issue.
Products covered
XenServer
These issues affect XenServer 8.4. (Note that Citrix Hypervisor 8.2 CU1 is now End of Life (EoL) and so no longer receives security updates or security bulletins.)
Remediation
We have pushed updates to both the Early Access and Normal update channels of XenServer 8.4. We recommend that customers update to the latest version from their chosen channel following the instructions at https://docs.xenserver.com/en-us/xenserver/8/update.
However, customers should note that the AMD microcode update provided is only effective on systems where the system firmware ("BIOS") has been updated to a version that includes a fix for CVE-2024-36347. This may be marked in the firmware release notes by reference to the firmware containing âAGESA PI 1.0.0.4â or later. Customers who are uncertain about their firmware version are recommended to contact their hardware vendor.
CVEs in this advisory 2
Updates
- Published by Citrix
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.