USN-9034-1: Linux kernel (AWS) vulnerabilities
USN-9034-1
Summary
Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-9986)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
- Ethernet bonding driver;
- PCI subsystem;
- SCSI subsystem;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- IUCV driver; (CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210, CVE-2024-56763, CVE-2026-31657, CVE-2026-43456)
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
This update corrects flaws in the following subsystems:
- Ethernet bonding driver
- PCI subsystem
- SCSI subsystem
- Tracing infrastructure
- B.A.T.M.A.N.
CVEs in this advisory 8
Updates
- Published by Ubuntu
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.