Linux Kernel (AWS) Vulnerabilities — Ubuntu Security Update (USN-9034-1)

Demi Marie Obenour and Simon Gaiser discovered that several Xen para-
virtualization device frontends did not properly restrict the access rights
of device backends. An attacker could possibly use a malicious Xen backend
to gain access to memory pages of a guest VM or cause a denial of service
in the guest. (CVE-2022-23037)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
(CVE-2021-47633, CVE-2022-49058, CVE-2022-49170, CVE-2023-52784,
CVE-2024-53194, CVE-2024-53210, CVE-2024-53214, CVE-2024-56570,
CVE-2024-56616, CVE-2024-56763, CVE-2024-56779, CVE-2024-57904,
CVE-2025-21664, CVE-2025-38604, CVE-2025-39743, CVE-2026-43456,
CVE-2026-74350)

• GPU drivers;
• IIO ADC drivers;
• Multiple devices driver;
• Ethernet bonding driver;
• Network drivers;
• PCI subsystem;
• VFIO drivers;
• File systems infrastructure;
• F2FS file system;
• JFS file system;
• Network file system (NFS) server daemon;
• OCFS2 file system;
• Overlay file system;
• Tracing infrastructure;
• IUCV driver;