[LU-11159] kernel update [RHEL7.5 3.10.0-862.9.1.el7]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.12.0, Lustre 2.10.5
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

This update fixes the following bug:

Previously, the connection tracking information was not cleared properly for packets forwarded to another network namespace. Packets that were marked with the "NOTRACK" target in one namespace were excluded from connection tracking even in the new namespace. Consequently, a loss of connectivity occasionally occurred, depending on the packet filtering ruleset of the other network namespaces. This update fixes the nf_reset() function to clear the connection tracking information properly. As a result, configuration properties related to connection tracking in one namespace do not leak into other namespaces, and the connectivity loss due to this behavior no longer occurs. (BZ#1588458)

Users of kernel are advised to upgrade to these updated packages, which fix this bug. The system must be rebooted for this update to take effect.

Issue Links

• is related to: LU-11253 kernel update [RHEL7.5 3.10.0-862.11.6.el7]
• is related to: LU-11129 kernel update [RHEL7.5 3.10.0-862.6.3.el7]