USN-9034-1: Linux kernel (AWS) vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para-
virtualization device frontends did not properly restrict the access rights
of device backends. An attacker could possibly use a malicious Xen backend
to gain access to memory pages of a guest VM or cause a denial of service
in the guest. (CVE-2022-23037)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- IIO ADC drivers;
- Multiple devices driver;
- Ethernet bonding driver;
- Network drivers;
- PCI subsystem;
- VFIO drivers;
- File systems infrastructure;
- F2FS file system;
- JFS file system;
- Network file system (NFS) server daemon;
- OCFS2 file system;
- Overlay file system;
- Tracing infrastructure;
- IUCV driver;
(CVE-2021-47633, CVE-2022-49058, CVE-2022-49170, CVE-2023-52784,
CVE-2024-53194, CVE-2024-53210, CVE-2024-53214, CVE-2024-56570,
CVE-2024-56616, CVE-2024-56763, CVE-2024-56779, CVE-2024-57904,
CVE-2025-21664, CVE-2025-38604, CVE-2025-39743, CVE-2026-43456,
CVE-2026-74350)