[LU-14373] kernel update [RHEL8.3 4.18.0-240.10.1.el8_3]

• Type: Improvement
• Resolution: Won't Fix
• Priority: Minor
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es):

• kernel: Local buffer overflow in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c (CVE-2020-25211)

Bug Fix(es):

• avoid flush_backlog IPI for isolated CPUs by configuring RPS cpumask (BZ#1883314)
• rngd consumes 100% cpu on rhel-8.3 system in fips mode (BZ#1886192)
• RHEL8.1 - Random memory corruption may occur due to incorrect tlbflush (BZ#1899208)
• fips mode boot is broken after adding extrng (BZ#1899584)
• pmtu of 1280 for vxlan as bridge port won't work (BZ#1902082)
• rpc task loop with kworker spinning at 100% CPU for 10 minutes when umount an NFS 4.x share with sec=krb5 triggered by unmount of the NFS share (BZ#1907667)

https://access.redhat.com/errata/RHSA-2021:0003?sc_cid=701600000006NHXAA2

Issue Links

• is related to: LU-14450 kernel update [RHEL8.3 4.18.0-240.15.1.el8_3]
• is related to: LU-14225 kernel update [RHEL8.3 4.18.0-240.8.1.el8_3]