Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux‑AWS kernel can be hijacked by attackers
published 1 month ago
Summary
The Linux kernel used in the Amazon Web Services (AWS) images from Canonical has several weaknesses in its memory driver, file system code, network services and other components. An attacker could exploit these flaws to gain control of the system or steal data. Install the latest kernel update from Canonical as soon as possible to close the gaps.
What to do
- Update canonical linux-aws to version 4.4.0-1196.211.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1196.211 Fix: upgrade to 4.4.0-1196.211
|
Original advisory text
linux-aws vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NVIDIA Tegra memory controller driver;
- File systems infrastructure;
- Network file system (NFS) server daemon;
- OCFS2 file system;
- B.A.T.M.A.N. meshing protocol;
- Netfilter;
- SCTP protocol;
(CVE-2022-50401, CVE-2026-43071, CVE-2026-52914, CVE-2026-53002,
CVE-2026-53043, CVE-2026-53045, CVE-2026-53224, CVE-2026-53309)
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NVIDIA Tegra memory controller driver;
- File systems infrastructure;
- Network file system (NFS) server daemon;
- OCFS2 file system;
- B.A.T.M.A.N. meshing protocol;
- Netfilter;
- SCTP protocol;
(CVE-2022-50401, CVE-2026-43071, CVE-2026-52914, CVE-2026-53002,
CVE-2026-53043, CVE-2026-53045, CVE-2026-53224, CVE-2026-53309)
References
- https://ubuntu.com/security/notices/USN-8725-2 Vendor Advisory
- https://ubuntu.com/security/CVE-2022-50401 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-43071 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-52914 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-53002 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-53043 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-53045 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-53224 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-53309 Third Party Advisory
Timeline
Published18 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
USN-8725-2 · OSV
Track software like this
Free during beta