[LU-12139] kernel update [SLES12 SP3 4.4.176-94.88.1]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.13.0
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.176 to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2019-9213: expand_downwards in mm/mmap.c lacked a check for the mmap
  minimum address, which made it easier for attackers to exploit kernel
  NULL pointer dereferences on non-SMAP platforms. This is related to a
  capability check for the wrong task (bnc#1128166).
• CVE-2019-2024: A use-after-free when disconnecting a source was fixed
  which could lead to crashes. bnc#1129179).

For non-security bugs fixed, please refer to:
http://lists.suse.com/pipermail/sle-security-updates/2019-March/005262.html

Issue Links

• is related to: LU-12307 kernel update [SLES12 SP3 4.4.178-94.91.2]
• is related to: LU-12046 kernel update [SLES12 SP3 4.4.175-94.79.1]