Skip to content
OpenAdvisories
Unscored USN-8967-1 0 CVEs

linux-aws vulnerability

Published Nov 3, 2026 · Updated Nov 3, 2026

Summary

Jürgen Groß discovered that the Xen network backend driver in the Linux
kernel did not adequately limit the amount of queued packets when a guest
did not process them. An attacker in a guest VM can use this to cause a
denial of service (excessive kernel memory consumption) in the network
backend domain.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-aws 4.4.0-1199.214

References

  • report
    https://ubuntu.com/security/CVE-2021-28714