Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-9032-1)
USN-9032-1 fixes 9 distinct kernel CVEs for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS — a small batch by this notice family's standards, but its severity data reaches CVSS 9.8, the highest in this batch. Corrections cover GPU drivers, the Ethernet bonding driver, network drivers, the F2FS file system, tracing infrastructure, networking core, the IUCV driver and RxRPC session sockets. The listed flaws include CVE-2022-49149; CWE-362 (race condition) is cited in this advisory's data.
What this means under a SharedLicense license
A 9.8 ceiling in the notice's own severity data puts this kernel update ahead of routine patching even though the CVE count is modest. Race-condition flaws in driver and networking code are typically local-attacker material — crash or privilege-adjacent outcomes — so patch and reboot promptly.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
(CVE-2022-49149, CVE-2022-49170, CVE-2023-52784, CVE-2024-53210,
CVE-2024-56616, CVE-2024-56763, CVE-2026-43456, CVE-2026-52910,
CVE-2026-53086)
- GPU drivers;
- Ethernet bonding driver;
- Network drivers;
- F2FS file system;
- Tracing infrastructure;
- Networking core;
- IUCV driver;
- RxRPC session sockets;
Frequently Asked Questions
Why treat USN-9032-1 as urgent?
Which kernel areas are touched?
Is a reboot needed?
Check your system for vulnerabilities
Select your product and operating system to see the exact fix commands that apply to you.
Check Your System