Zurück zu den Sicherheitshinweisen

Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-9033-1)

USN-9033-1 updates the general kernel packages for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS, fixing 19 distinct kernel CVEs. The headline flaw (CVE-2022-23036, CVE-2022-23037): several Xen paravirtualization device frontends did not properly restrict the access rights of device backends, so a malicious backend could gain access to memory pages of a guest VM or cause a denial of service in the guest. The advisory carries CVSS 7 with CWE-362 (race conditions) in this advisory's data.

High 7 CVSS
Ubuntu 20.04 Ubuntu 22.04

Was das unter einer SharedLicense-Lizenz bedeutet

The Xen frontend flaws matter wherever guests talk to untrusted backends — multi-tenant virtualization setups above all. On AWS, the linux-aws flavour is the exposed build. Apply the kernel update and reboot; the notice's own data rates the family up to CVSS 7.

Demi Marie Obenour and Simon Gaiser discovered that several Xen para-
virtualization device frontends did not properly restrict the access rights
of device backends. An attacker could possibly use a malicious Xen backend
to gain access to memory pages of a guest VM or cause a denial of service
in the guest. (CVE-2022-23036, CVE-2022-23037)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
(CVE-2021-47633, CVE-2022-49058, CVE-2022-49170, CVE-2023-52784,
CVE-2024-53194, CVE-2024-53210, CVE-2024-53214, CVE-2024-56570,
CVE-2024-56616, CVE-2024-56763, CVE-2024-56779, CVE-2024-57904,
CVE-2025-21664, CVE-2025-38604, CVE-2025-39743, CVE-2026-43456,
CVE-2026-74350)

  • GPU drivers;
  • IIO ADC drivers;
  • Multiple devices driver;
  • Ethernet bonding driver;
  • Network drivers;
  • PCI subsystem;
  • VFIO drivers;
  • File systems infrastructure;
  • F2FS file system;
  • JFS file system;
  • Network file system (NFS) server daemon;
  • OCFS2 file system;
  • Overlay file system;
  • Tracing infrastructure;
  • IUCV driver;

Häufig gestellte Fragen

What is the Xen risk in USN-9033-1?
A malicious device backend could reach guest memory pages or knock the guest offline via the paravirtualized frontend drivers.
How many kernel flaws are fixed?
19 distinct CVE identifiers are listed in the notice.
What action is required?
Update kernel packages and reboot the machine to run the patched kernel.

Referenzen

Sicherheitshinweise

Verwandte Warnhinweise

Tornado Regression — Ubuntu Security Update (USN-8952-3)

2026-11-11

Linux Kernel (Azure CVM) Vulnerabilities — Ubuntu Security Update (USN-9039-1)

2026-11-11

Linux Kernel (Low Latency NVIDIA) Vulnerabilities — Ubuntu Security Update (USN-9040-1)

2026-11-11

System auf Schwachstellen prüfen

Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.

System prüfen