WhatBrokeToday
FAQ
Today's Trends
highInvestigatingUbuntu

Linux Kernel Vulnerabilities Disclosed in Multiple Ubuntu Security Notices

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

Multiple security vulnerabilities were discovered across various Linux kernel subsystems and architectures, including x86, ARM, Xen para-virtualization frontends, GPU drivers, file systems, and networking components. Ubuntu has published security updates (USN-9027-1, USN-9023-1, USN-9033-1, USN-9032-1, USN-9034-1, USN-9035-1, USN-9025-1, USN-9022-1) to correct these flaws.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Official fix
Technical root cause

Flaws were identified across multiple Linux kernel subsystems, drivers, and architectures, potentially allowing an attacker to compromise the system, gain unauthorized memory access, or cause a denial of service.

Evidence

11 reports · 11 CVEShow
  1. [1]
    CVE
    USN-9028-1: Linux kernel (Azure CVM) vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; (CVE-2025-21656, CVE-2026-63940, CVE-2026-74350)

    by Ubuntu Security 0upvotes 0comments96% match

  2. [2]
    CVE
    USN-9031-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HID subsystem; - InfiniBand drivers; - Network drivers; - PCI subsystem; - SCSI subsystem; - JFS file system; - Network file system (NFS) client; - OCFS2 file system; (CVE-2022-49082, CVE-2025-39730, CVE-2025-39743, CVE-2025-39783, CVE-2025-39810, CVE-2025-39824, CVE-2026-74350, CVE-2026-74394)

    by Ubuntu Security 0upvotes 0comments97% match

  3. [3]
    CVE
    USN-9030-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HID subsystem; - InfiniBand drivers; - Network drivers; - PCI subsystem; - JFS file system; - OCFS2 file system; (CVE-2025-39743, CVE-2025-39783, CVE-2025-39810, CVE-2025-39824, CVE-2026-74350, CVE-2026-74394)

    by Ubuntu Security 0upvotes 0comments97% match

  4. [4]
    CVE First report
    USN-9027-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; - IPv4 networking; - Ethernet bridge; - Netfilter; - XFRM subsystem; (CVE-2025-21656, CVE-2026-63940, CVE-2026-74350, CVE-2026-98432, CVE-2026-99999)

    by Ubuntu Security 0upvotes 0comments

  5. [5]
    CVE
    USN-9023-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Network file systems library; - Networking core; - Stream parser; - ARM32 architecture; - ARM64 architecture; - M68K architecture; - MIPS architecture; - OpenRISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - User-Mode Linux (UML); -…

    by Ubuntu Security 0upvotes 0comments96% match

  6. [6]
    CVE
    USN-9033-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23036, CVE-2022-23037) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in…

    by Ubuntu Security 0upvotes 0comments93% match

  7. [7]
    CVE
    USN-9032-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Ethernet bonding driver; - Network drivers; - F2FS file system; - Tracing infrastructure; - Networking core; - IUCV driver; - RxRPC session sockets; (CVE-2022-49149, CVE-2022-49170, CVE-2023-52784, CVE-2024-53210, CVE-2024-56616, CVE-2024-56763, CVE-2026-43456, CVE-2026-52910, CVE-2026-53086)

    by Ubuntu Security 0upvotes 0comments97% match

  8. [8]
    CVE
    USN-9034-1: Linux kernel (AWS) vulnerabilities(opens security advisory in a new tab)

    Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23037) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following…

    by Ubuntu Security 0upvotes 0comments95% match

  9. [9]
    CVE
    USN-9035-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-9986) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following…

    by Ubuntu Security 0upvotes 0comments94% match

  10. [10]
    CVE
    USN-9025-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:…

    by Ubuntu Security 0upvotes 0comments95% match

  11. [11]
    CVE
    USN-9022-1: Linux kernel vulnerabilities(opens security advisory in a new tab)

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - USB Gadget drivers; - Memory management; - Network file systems library; - Networking core; - Stream parser; - ARM32 architecture; - ARM64 architecture; - M68K architecture; - MIPS architecture; - OpenRISC architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - User-Mode Linux (UML); -…

    by Ubuntu Security 0upvotes 0comments97% match

Timeline

  1. First report on security advisory

    USN-9028-1: Linux kernel (Azure CVM) vulnerabilities

    Source