[LU-18373] kernel update [RHEL 9.4 5.14.0-427.40.1.el9_4]

• Type: Task
• Resolution: Unresolved
• Priority: Minor
• Affects Version/s: Lustre 2.16.0
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es):

• kernel: Local information disclosure on Intel(R) Atom(R) processors (CVE-2023-28746)
• kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow (CVE-2024-27403)
• kernel: Revert "net/mlx5: Block entering switchdev mode with ns inconsistency" (CVE-2023-52658)
• kernel: dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (CVE-2024-35989)
• kernel: hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (CVE-2021-47385)
• kernel: mptcp: ensure snd_nxt is properly initialized on connect (CVE-2024-36889)
• kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (CVE-2024-36978)
• kernel: net/mlx5: Add a timeout to acquire the command queue semaphore (CVE-2024-38556)
• kernel: KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (CVE-2024-39483)
• kernel: ionic: fix use after netif_napi_del() (CVE-2024-39502)
• kernel: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CVE-2024-40959)
• kernel: gfs2: Fix NULL pointer dereference in gfs2_log_flush (CVE-2024-42079)
• kernel: sched: act_ct: take care of padding in struct zones_ht_key (CVE-2024-42272)
• kernel: tipc: Return non-zero value from tipc_udp_addr2str() on error (CVE-2024-42284)

https://access.redhat.com/errata/product/479/ver=/rhel---9/x86_64/RHSA-2024:8162

Issue Links

• is related to: LU-18262 kernel update [RHEL 9.4 5.14.0-427.37.1.el9_4]

Comments

[Gerrit Updater]

"Jian Yu <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/56708
Subject: LU-18373 kernel: update RHEL 9.4 [5.14.0-427.40.1.el9_4]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 6f64a4acd065a4dad6dbc037ed239502b4736e43