[LU-18969] kernel update [RHEL 9.5 5.14.0-503.40.1.el9_5]

• Type: Task
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.15.7
• Affects Version/s: Lustre 2.17.0, Lustre 2.15.7
• Severity: 3
• Assignee: Jian Yu
• Reporter: Jian Yu

Description

Security Fix(es):

• kernel: kobject_uevent: Fix OOB access within zap_modalias_env() (CVE-2024-42292)
• kernel: ipvs: properly dereference pe in ip_vs_add_service (CVE-2024-42322)
• kernel: bonding: fix null pointer deref in bond_ipsec_offload_ok (CVE-2024-44990)
• kernel: ELF: fix kernel.randomize_va_space double read (CVE-2024-46826)
• kernel: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (CVE-2025-21927)

https://access.redhat.com/errata/product/479/ver=/rhel---9/x86_64/RHSA-2025:4341

Issue Links

• is related to: LU-18910 kernel update [RHEL 9.5 5.14.0-503.38.1.el9_5]