Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-9035-1)

Pengfei Wang discovered that the Turtle Beach MultiSound audio device
driver in the Linux kernel contained race conditions when fetching from the
ring-buffer, leading to an out-of-bounds access. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-9986)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
(CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210,
CVE-2024-56763, CVE-2026-31657, CVE-2026-43456)

• Ethernet bonding driver;
• PCI subsystem;
• SCSI subsystem;
• Tracing infrastructure;
• B.A.T.M.A.N. meshing protocol;
• IUCV driver;