Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-12458

kernel update [RHEL7.6 3.10.0-957.21.3.el7]

Details

    • 3
    • 9223372036854775807

    Description

      Security Fix(es):

      • An integer overflow flaw was found in the way the Linux kernel's networking subsystem processed TCP Selective Acknowledgment (SACK) segments. While processing SACK segments, the Linux kernel's socket buffer (SKB) data structure becomes fragmented. Each fragment is about TCP maximum segment size (MSS) bytes. To efficiently process SACK blocks, the Linux kernel merges multiple fragmented SKBs into one, potentially overflowing the variable holding the number of segments. A remote attacker could use this flaw to crash the Linux kernel by sending a crafted sequence of SACK segments on a TCP connection with small value of TCP MSS, resulting in a denial of service (DoS). (CVE-2019-11477)
      • Kernel: tcp: excessive resource consumption while processing SACK blocks allows remote denial of service (CVE-2019-11478)
      • Kernel: tcp: excessive resource consumption for TCP connections with low MSS allows remote denial of service (CVE-2019-11479)

      https://access.redhat.com/errata/product/69/ver=/rhel---7/x86_64/RHSA-2019:1481

      Attachments

        Issue Links

          Activity

            [LU-12458] kernel update [RHEL7.6 3.10.0-957.21.3.el7]
            pjones Peter Jones added a comment -

            Landed for 2.13

            pjones Peter Jones added a comment - Landed for 2.13

            Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/35268/
            Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7]
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 4fb7805c408bd9d0b6409ffbc82aac501aaa025a

            gerrit Gerrit Updater added a comment - Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/35268/ Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7] Project: fs/lustre-release Branch: master Current Patch Set: Commit: 4fb7805c408bd9d0b6409ffbc82aac501aaa025a

            Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/35269/
            Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7]
            Project: fs/lustre-release
            Branch: b2_12
            Current Patch Set:
            Commit: 37cb98dba636612d04af02c40b051d9a6ca42e90

            gerrit Gerrit Updater added a comment - Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/35269/ Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7] Project: fs/lustre-release Branch: b2_12 Current Patch Set: Commit: 37cb98dba636612d04af02c40b051d9a6ca42e90

            Jian Yu (yujian@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/35269
            Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7]
            Project: fs/lustre-release
            Branch: b2_12
            Current Patch Set: 1
            Commit: 74047954d93d7b4d01da1755bcfb0f4ac8a2548a

            gerrit Gerrit Updater added a comment - Jian Yu (yujian@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/35269 Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7] Project: fs/lustre-release Branch: b2_12 Current Patch Set: 1 Commit: 74047954d93d7b4d01da1755bcfb0f4ac8a2548a

            Jian Yu (yujian@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/35268
            Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7]
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 707b4e6608517c9cc6b46d6772e173a5ecdb7e8a

            gerrit Gerrit Updater added a comment - Jian Yu (yujian@whamcloud.com) uploaded a new patch: https://review.whamcloud.com/35268 Subject: LU-12458 kernel: kernel update RHEL7.6 [3.10.0-957.21.3.el7] Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 707b4e6608517c9cc6b46d6772e173a5ecdb7e8a

            People

              yujian Jian Yu
              yujian Jian Yu
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: