USN-9035-1: Linux kernel vulnerabilities
Pengfei Wang discovered that the Turtle Beach MultiSound audio device
driver in the Linux kernel contained race conditions when fetching from the
ring-buffer, leading to an out-of-bounds access. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-9986)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Ethernet bonding driver;
- PCI subsystem;
- SCSI subsystem;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- IUCV driver;
(CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210,
CVE-2024-56763, CVE-2026-31657, CVE-2026-43456)