USN-9035-1: linux vulnerabilities

Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-9986)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - PCI subsystem; - SCSI subsystem; - Tracing infrastructure; - B.A.T.M.A.N. meshing protocol; - IUCV driver; (CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210, CVE-2024-56763, CVE-2026-31657, CVE-2026-43456)