USN-8967-1
- Source
- https://ubuntu.com/security/notices/USN-8967-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8967-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/USN-8967-1
- Upstream
- Published
- 2026-11-03T11:03:11Z
- Modified
- 2026-11-03T21:19:25Z
- Summary
- linux-aws vulnerability
- Details
-
Jürgen Groß discovered that the Xen network backend driver in the Linux kernel did not adequately limit the amount of queued packets when a guest did not process them. An attacker in a guest VM can use this to cause a denial of service (excessive kernel memory consumption) in the network backend domain.
- References
Affected packages
Ubuntu:Pro:16.04:LTS / linux-aws
Package
- Name
- linux-aws
- Purl
- pkg:deb/ubuntu/linux-aws?arch=source&distro=esm-infra-legacy%2Fxenial
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed4.4.0-1199.214
Affected versions
4.*
4.4.0-1001.10
4.4.0-1003.12
4.4.0-1004.13
4.4.0-1007.16
4.4.0-1009.18
4.4.0-1011.20
4.4.0-1012.21
4.4.0-1013.22
4.4.0-1016.25
4.4.0-1017.26
4.4.0-1018.27
4.4.0-1020.29
4.4.0-1022.31
4.4.0-1026.35
4.4.0-1028.37
4.4.0-1030.39
4.4.0-1031.40
4.4.0-1032.41
4.4.0-1035.44
4.4.0-1037.46
4.4.0-1038.47
4.4.0-1039.48
4.4.0-1041.50
4.4.0-1043.52
4.4.0-1044.53
4.4.0-1047.56
4.4.0-1048.57
4.4.0-1049.58
4.4.0-1050.59
4.4.0-1052.61
4.4.0-1054.63
4.4.0-1055.64
4.4.0-1057.66
4.4.0-1060.69
4.4.0-1061.70
4.4.0-1062.71
4.4.0-1063.72
4.4.0-1065.75
4.4.0-1066.76
4.4.0-1067.77
4.4.0-1069.79
4.4.0-1070.80
4.4.0-1072.82
4.4.0-1073.83
4.4.0-1074.84
4.4.0-1075.85
4.4.0-1077.87
4.4.0-1079.89
4.4.0-1081.91
4.4.0-1083.93
4.4.0-1084.94
4.4.0-1085.96
4.4.0-1087.98
4.4.0-1088.99
4.4.0-1090.101
4.4.0-1092.103
4.4.0-1094.105
4.4.0-1095.106
4.4.0-1096.107
4.4.0-1098.109
4.4.0-1099.110
4.4.0-1100.111
4.4.0-1101.112
4.4.0-1102.113
4.4.0-1104.115
4.4.0-1105.116
4.4.0-1106.117
4.4.0-1107.118
4.4.0-1109.120
4.4.0-1110.121
4.4.0-1111.123
4.4.0-1112.124
4.4.0-1113.126
4.4.0-1114.127
4.4.0-1117.131
4.4.0-1118.132
4.4.0-1119.133
4.4.0-1121.135
4.4.0-1122.136
4.4.0-1123.137
4.4.0-1124.138
4.4.0-1126.140
4.4.0-1127.141
4.4.0-1128.142
4.4.0-1129.143
4.4.0-1130.144
4.4.0-1131.145
4.4.0-1132.146
4.4.0-1133.147
4.4.0-1134.148
4.4.0-1135.149
4.4.0-1137.151
4.4.0-1138.152
4.4.0-1139.153
4.4.0-1140.154
4.4.0-1143.158
4.4.0-1145.160
4.4.0-1146.161
4.4.0-1147.162
4.4.0-1148.163
4.4.0-1150.165
4.4.0-1151.166
4.4.0-1152.167
4.4.0-1153.168
4.4.0-1154.169
4.4.0-1155.170
4.4.0-1156.171
4.4.0-1157.172
4.4.0-1158.173
4.4.0-1159.174
4.4.0-1160.175
4.4.0-1161.176
4.4.0-1162.177
4.4.0-1163.178
4.4.0-1164.179
4.4.0-1165.180
4.4.0-1166.181
4.4.0-1167.182
4.4.0-1168.183
4.4.0-1169.184
4.4.0-1171.186
4.4.0-1172.187
4.4.0-1173.188
4.4.0-1174.189
4.4.0-1175.190
4.4.0-1176.191
4.4.0-1177.192
4.4.0-1178.193
4.4.0-1179.194
4.4.0-1180.195
4.4.0-1181.196
4.4.0-1182.197
4.4.0-1183.198
4.4.0-1184.199
4.4.0-1185.200
4.4.0-1186.201
4.4.0-1187.202
4.4.0-1188.203
4.4.0-1189.204
4.4.0-1190.205
4.4.0-1191.206
4.4.0-1192.207
4.4.0-1193.208
4.4.0-1194.209
4.4.0-1195.210
4.4.0-1196.211
4.4.0-1197.212
4.4.0-1198.213
Ecosystem specific
{
"availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "linux-aws-cloud-tools-4.4.0-1199",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-aws-headers-4.4.0-1199",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-aws-tools-4.4.0-1199",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-buildinfo-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-cloud-tools-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-headers-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-image-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-modules-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-modules-extra-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
},
{
"binary_name": "linux-tools-4.4.0-1199-aws",
"binary_version": "4.4.0-1199.214"
}
]
}
Database specific
cves_map
{
"cves": [
{
"id": "CVE-2021-28714",
"severity": [
{
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
"type": "CVSS_V4"
},
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "high",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8967-1.json"