Ubuntu fixes Linux kernel flaws in drivers, F2FS and networking
Original title: USN-9032-1: Linux kernel vulnerabilities
USN-9032-1 lists nine CVEs spanning GPU, bonding, F2FS, tracing, networking core, IUCV and RxRPC.
Ubuntu published USN-9032-1 after several security issues were found in the Linux kernel. Ubuntu says an attacker could possibly use them to compromise the system. The update covers GPU drivers, the Ethernet bonding driver, network drivers, F2FS, tracing, the networking core, the IUCV driver and RxRPC session sockets.
Unconfirmed: The snippet does not state fixed versions or whether any flaw is exploited.
- Listed CVEs run from CVE-2022-49149 and CVE-2022-49170 through CVE-2026-53086.
- Affected areas include F2FS, tracing infrastructure and RxRPC session sockets.
- No exploitation or fixed package versions are stated in the snippet.
Impact: Possible compromise of the system
| Product | Affected |
|---|---|
| Canonical Linux kernel | — |
- 1.Apply the Linux kernel updates in USN-9032-1.
- CVEs
- CVE-2022-49149CVE-2022-49170CVE-2023-52784CVE-2024-53210CVE-2024-56616CVE-2024-56763CVE-2026-43456CVE-2026-52910CVE-2026-53086
- Vendors
- Canonical
- Products
- Linux kernel
- Organizations
- Ubuntu
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-49170+1 related CVE | Linux kernel: f2fs: fix to do sanity check on curseg->alloc_type | 7.8 group max | <1% | ||
| CVE-2023-52784 | Linux kernel: bonding: stop the device in bond_setup_by_slave() | 5.5 | <1% | ||
CVE-2024-56616+1 related CVE | Linux kernel: drm/dp_mst | 7.8 group max | <1% | ||
| CVE-2024-56763 | Linux kernel: tracing: Prevent bad count for tracing_cpumask_write | 5.5 | <1% | ||
| CVE-2026-43456 | Linux kernel: bonding: fix type confusion in bond_setup_by_slave() kernel | 7.8 | <1% | ||
| CVE-2026-52910 | Linux kernel: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] | 7.8 | <1% | PoC | |
| CVE-2026-53086 | Linux kernel: net: bcmgenet: fix racing timeout handler | 9.8 | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.