Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-9035-1)
USN-9035-1 fixes 8 distinct kernel CVEs for Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Its lead flaw (CVE-2017-9986, CWE-125 out-of-bounds in this advisory's data): Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access a local attacker could use to crash the system or possibly execute arbitrary code. The notice's severity data reaches CVSS 7.8.
SharedLicense lisansı altında bunun anlamı
The audio-driver flaw only matters where that legacy driver is loaded, but the notice bundles 8 kernel fixes — patch on the regular cycle and reboot. Local code-execution potential in a kernel driver justifies prompt treatment.
Pengfei Wang discovered that the Turtle Beach MultiSound audio device
driver in the Linux kernel contained race conditions when fetching from the
ring-buffer, leading to an out-of-bounds access. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-9986)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
(CVE-2022-49114, CVE-2023-52784, CVE-2024-53194, CVE-2024-53210,
CVE-2024-56763, CVE-2026-31657, CVE-2026-43456)
- Ethernet bonding driver;
- PCI subsystem;
- SCSI subsystem;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- IUCV driver;
Sıkça Sorulan Sorular
Who is affected by the audio driver flaw?
What is the worst outcome?
How to apply?
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin