mirror of
https://github.com/xen-project/xen.git
synced 2026-10-28 02:01:24 +01:00
The quota object contains both limits and the current node usage counts. When a domain is torn down, the node data itself is cleaned up but the node usage counts are not. A later domain reusing the same domid can create fewer nodes before being deemed to be over quota. Reset the count when the node permissions are cleaned up. This is XSA-483 / CVE-2026-23556. Signed-off-by: Andrii Sultanov <andriy.sultanov@vates.tech> Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com>