USN-9033-1: linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23036, CVE-2022-23037)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - IIO ADC drivers; - Multiple devices driver; - Ethernet bonding driver; - Network drivers; - PCI subsystem; - VFIO drivers; - File systems infrastructure; - F2FS file system; - JFS file system; - Network file system (NFS) server daemon; - OCFS2 file system; - Overlay file system; - Tracing infrastructure; - IUCV driver; (CVE-2021-47633, CVE-2022-49058, CVE-2022-49170, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210, CVE-2024-53214, CVE-2024-56570, CVE-2024-56616, CVE-2024-56763, CVE-2024-56779, CVE-2024-57904, CVE-2025-21664, CVE-2025-38604, CVE-2025-39743, CVE-2026-43456, CVE-2026-74350)