[LU-12791] kernel update [RHEL8.0 4.18.0-80.11.2.el8_0]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.14.0, Lustre 2.12.4
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es):

• A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835)

https://access.redhat.com/errata/RHSA-2019:2827?sc_cid=701600000006NHXAA2

Issue Links

• is related to: LU-12762 kernel update [RHEL8.0 4.18.0-80.11.1.el8_0]