I ended up opening a ticket with MS and also with Citrix to check logs and debug files. After a month of waiting, MS responded to try the November updates instead. So far so good, been up and running for more than two days now without any further BSOD or CPU freezes. Not really sure at this point what the cause may have been, but glad to be over this hurdle and be able to resume patching again! 🙂. The initial debug logs showed driver compatibility issues, although this was a new VM from a master template with nothing else installed, so the only drivers were MS and Xen.