USN-9033-1: Linux kernel vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23036, CVE-2022-23037)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

- GPU drivers;

- IIO ADC drivers;

- Multiple devices driver;

- Ethernet bonding driver;

- Network drivers;

- PCI subsystem;

- VFIO drivers;

- File systems infrastructure;

- F2FS file system;

- JFS file system;

- Network file system (NFS) server daemon;

- OCFS2 file system;

- Overlay file system;

- Tracing infrastructure;

- IUCV driver;