{"id":"USN-9034-1","summary":"linux-aws vulnerabilities","details":"Demi Marie Obenour and Simon Gaiser discovered that several Xen para-\nvirtualization device frontends did not properly restrict the access rights\nof device backends. An attacker could possibly use a malicious Xen backend\nto gain access to memory pages of a guest VM or cause a denial of service\nin the guest. (CVE-2022-23037)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - GPU drivers;\n  - IIO ADC drivers;\n  - Multiple devices driver;\n  - Ethernet bonding driver;\n  - Network drivers;\n  - PCI subsystem;\n  - VFIO drivers;\n  - File systems infrastructure;\n  - F2FS file system;\n  - JFS file system;\n  - Network file system (NFS) server daemon;\n  - OCFS2 file system;\n  - Overlay file system;\n  - Tracing infrastructure;\n  - IUCV driver;\n(CVE-2021-47633, CVE-2022-49058, CVE-2022-49170, CVE-2023-52784,\nCVE-2024-53194, CVE-2024-53210, CVE-2024-53214, CVE-2024-56570,\nCVE-2024-56616, CVE-2024-56763, CVE-2024-56779, CVE-2024-57904,\nCVE-2025-21664, CVE-2025-38604, CVE-2025-39743, CVE-2026-43456,\nCVE-2026-74350)\n","modified":"2026-11-11T09:58:17.042968282Z","published":"2026-11-10T08:46:28Z","related":["UBUNTU-CVE-2021-47633","UBUNTU-CVE-2022-23037","UBUNTU-CVE-2022-49058","UBUNTU-CVE-2022-49170","UBUNTU-CVE-2023-52784","UBUNTU-CVE-2024-53194","UBUNTU-CVE-2024-53210","UBUNTU-CVE-2024-53214","UBUNTU-CVE-2024-56570","UBUNTU-CVE-2024-56616","UBUNTU-CVE-2024-56763","UBUNTU-CVE-2024-56779","UBUNTU-CVE-2024-57904","UBUNTU-CVE-2025-21664","UBUNTU-CVE-2025-38604","UBUNTU-CVE-2025-39743","UBUNTU-CVE-2026-43456","UBUNTU-CVE-2026-74350"],"upstream":["CVE-2021-47633","CVE-2022-23037","CVE-2022-49058","CVE-2022-49170","CVE-2023-52784","CVE-2024-53194","CVE-2024-53210","CVE-2024-53214","CVE-2024-56570","CVE-2024-56616","CVE-2024-56763","CVE-2024-56779","CVE-2024-57904","CVE-2025-21664","CVE-2025-38604","CVE-2025-39743","CVE-2026-43456","CVE-2026-74350","UBUNTU-CVE-2021-47633","UBUNTU-CVE-2022-23037","UBUNTU-CVE-2022-49058","UBUNTU-CVE-2022-49170","UBUNTU-CVE-2023-52784","UBUNTU-CVE-2024-53194","UBUNTU-CVE-2024-53210","UBUNTU-CVE-2024-53214","UBUNTU-CVE-2024-56570","UBUNTU-CVE-2024-56616","UBUNTU-CVE-2024-56763","UBUNTU-CVE-2024-56779","UBUNTU-CVE-2024-57904","UBUNTU-CVE-2025-21664","UBUNTU-CVE-2025-38604","UBUNTU-CVE-2025-39743","UBUNTU-CVE-2026-43456","UBUNTU-CVE-2026-74350"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-9034-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2021-47633"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-23037"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-49058"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2022-49170"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-52784"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-53194"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-53210"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-53214"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-56570"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-56616"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-56763"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-56779"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2024-57904"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-21664"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-38604"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2025-39743"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-43456"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-74350"}],"affected":[{"package":{"name":"linux-aws","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/linux-aws?arch=source&distro=esm-infra-legacy%2Ftrusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1162.168"}]}],"versions":["4.4.0-1002.2","4.4.0-1003.3","4.4.0-1005.5","4.4.0-1006.6","4.4.0-1009.9","4.4.0-1010.10","4.4.0-1011.11","4.4.0-1012.12","4.4.0-1014.14","4.4.0-1016.16","4.4.0-1017.17","4.4.0-1019.19","4.4.0-1022.22","4.4.0-1023.23","4.4.0-1024.25","4.4.0-1025.26","4.4.0-1027.30","4.4.0-1028.31","4.4.0-1029.32","4.4.0-1031.34","4.4.0-1032.35","4.4.0-1034.37","4.4.0-1036.39","4.4.0-1037.40","4.4.0-1038.41","4.4.0-1039.42","4.4.0-1040.43","4.4.0-1042.45","4.4.0-1044.47","4.4.0-1045.48","4.4.0-1046.50","4.4.0-1048.52","4.4.0-1050.54","4.4.0-1052.56","4.4.0-1054.58","4.4.0-1055.59","4.4.0-1056.60","4.4.0-1058.62","4.4.0-1059.63","4.4.0-1060.64","4.4.0-1061.65","4.4.0-1062.66","4.4.0-1064.68","4.4.0-1065.69","4.4.0-1066.70","4.4.0-1067.71","4.4.0-1073.77","4.4.0-1074.78","4.4.0-1075.79","4.4.0-1076.80","4.4.0-1077.81","4.4.0-1078.82","4.4.0-1081.85","4.4.0-1082.86","4.4.0-1083.87","4.4.0-1085.89","4.4.0-1086.90","4.4.0-1087.91","4.4.0-1088.92","4.4.0-1090.94","4.4.0-1091.95","4.4.0-1092.96","4.4.0-1093.97","4.4.0-1094.99","4.4.0-1095.100","4.4.0-1096.101","4.4.0-1097.102","4.4.0-1098.103","4.4.0-1099.104","4.4.0-1101.106","4.4.0-1102.107","4.4.0-1103.108","4.4.0-1104.109","4.4.0-1107.113","4.4.0-1109.115","4.4.0-1110.116","4.4.0-1111.117","4.4.0-1112.118","4.4.0-1113.119","4.4.0-1114.120","4.4.0-1115.121","4.4.0-1116.122","4.4.0-1117.123","4.4.0-1118.124","4.4.0-1119.125","4.4.0-1120.126","4.4.0-1121.127","4.4.0-1122.128","4.4.0-1123.129","4.4.0-1124.130","4.4.0-1125.131","4.4.0-1127.133","4.4.0-1128.134","4.4.0-1129.135","4.4.0-1130.136","4.4.0-1131.137","4.4.0-1133.139","4.4.0-1134.140","4.4.0-1135.141","4.4.0-1136.142","4.4.0-1137.143","4.4.0-1138.144","4.4.0-1139.145","4.4.0-1140.146","4.4.0-1141.147","4.4.0-1142.148","4.4.0-1143.149","4.4.0-1144.150","4.4.0-1145.151","4.4.0-1146.152","4.4.0-1147.153","4.4.0-1148.154","4.4.0-1149.155","4.4.0-1150.156","4.4.0-1151.157","4.4.0-1152.158","4.4.0-1153.159","4.4.0-1154.160","4.4.0-1155.161","4.4.0-1156.162","4.4.0-1157.163","4.4.0-1158.164","4.4.0-1159.165","4.4.0-1160.166","4.4.0-1161.167"],"ecosystem_specific":{"binaries":[{"binary_name":"linux-aws-cloud-tools-4.4.0-1162","binary_version":"4.4.0-1162.168"},{"binary_name":"linux-aws-headers-4.4.0-1162","binary_version":"4.4.0-1162.168"},{"binary_name":"linux-aws-tools-4.4.0-1162","binary_version":"4.4.0-1162.168"},{"binary_version":"4.4.0-1162.168","binary_name":"linux-buildinfo-4.4.0-1162-aws"},{"binary_name":"linux-cloud-tools-4.4.0-1162-aws","binary_version":"4.4.0-1162.168"},{"binary_name":"linux-headers-4.4.0-1162-aws","binary_version":"4.4.0-1162.168"},{"binary_name":"linux-image-4.4.0-1162-aws","binary_version":"4.4.0-1162.168"},{"binary_name":"linux-modules-4.4.0-1162-aws","binary_version":"4.4.0-1162.168"},{"binary_name":"linux-tools-4.4.0-1162-aws","binary_version":"4.4.0-1162.168"}],"availability":"Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"},"database_specific":{"cves_map":{"ecosystem":"Ubuntu:Pro:14.04:LTS","cves":[{"id":"CVE-2021-47633","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"low"}],"id":"CVE-2022-23037"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"high"}],"id":"CVE-2022-49058"},{"id":"CVE-2022-49170","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"high","type":"Ubuntu"}]},{"id":"CVE-2023-52784","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"low"}]},{"id":"CVE-2024-53194","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"low"}]},{"id":"CVE-2024-53210","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"type":"Ubuntu","score":"medium"}]},{"id":"CVE-2024-53214","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"low","type":"Ubuntu"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2024-56570"},{"id":"CVE-2024-56616","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"high"}]},{"id":"CVE-2024-56763","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"Ubuntu","score":"low"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}],"id":"CVE-2024-56779"},{"id":"CVE-2024-57904","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"low"}]},{"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"low","type":"Ubuntu"}],"id":"CVE-2025-21664"},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2025-38604"},{"id":"CVE-2025-39743","severity":[{"score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","type":"CVSS_V4"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"high"}]},{"severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"score":"high","type":"Ubuntu"}],"id":"CVE-2026-43456"},{"id":"CVE-2026-74350","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"},{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"type":"Ubuntu","score":"high"}]}]},"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-9034-1.json"}}],"schema_version":"1.9.2"}