[LU-12724] kernel update [RHEL7.7 3.10.0-1062.1.1.el7]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.13.0, Lustre 2.12.3
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

An update for kernel is now available for Red Hat Enterprise Linux 7.7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Security Fix(es):

• kernel: hw: Spectre SWAPGS gadget vulnerability (CVE-2019-1125)
• kernel: brcmfmac heap buffer overflow in brcmf_wowl_nd_results (CVE-2019-9500)

Bug Fix(es):

• [mlx4] VXLAN over VLAN TCP segmentation (BZ#1734333)
• Race condition in /dev/sg due to missing synchronization causes corruption in RHV (BZ#1737380)
• panic handing smb2_reconnect due to a use after free (BZ#1737382)
• NFSv4.1 client stuck in infinite loop when received NFS4ERR_SEQ_MISORDERED error (BZ#1739077)
• Backport TCP follow-up for small buffers (BZ#1739130)

https://access.redhat.com/errata/RHSA-2019:2600?sc_cid=701600000006NHXAA2

Issue Links

• is related to: LU-12792 kernel update [RHEL7.7 3.10.0-1062.1.2.el7]
• is related to: LU-12457 support for RHEL 7.7