USN-8967-1: Linux kernel (AWS) vulnerability
Published Nov 3, 2026
·Updated
Jürgen Groß discovered that the Xen network backend driver in the Linux kernel did not adequately limit the amount of queued packets when a guest did not process them. An attacker in a guest VM can use this to cause a denial of service (excessive kernel memory consumption) in the network backend domain.
Affected Software
5 affected componentsFixes available
All of the following
ubuntu/linux-image-4.4.0-1199-aws<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
All of the following
ubuntu/linux-image-aws<Ubuntu Pro
Ubuntu Pro
Ubuntu Ubuntu=16.04
ubuntu/linux-aws<4.4.0-1199.214
4.4.0-1199.214
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-4.4.0-1199-awsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 4.4.0-1199.214
Event History
Nov 3, 2026
Advisory Published
via Ubuntu·12:00 AM
Data Sourced
via Ubuntu·12:00 AM
DescriptionAffected Software
Advisory Published
via OSV·11:03 AM
Data Sourced
via OSV·11:03 AM
DescriptionAffected Software