[LU-4620] Kernel update [RHEL6.5 2.6.32-431.5.1.el6]

• Type: Improvement
• Resolution: Fixed
• Priority: Blocker
• Fix Version/s: Lustre 2.6.0, Lustre 2.5.1
• Labels: MB
• Assignee: Bob Glossman (Inactive)
• Reporter: Bob Glossman (Inactive)

Description

This update fixes the following security issues:

• A buffer overflow flaw was found in the way the qeth_snmp_command()
  function in the Linux kernel's QETH network device driver implementation
  handled SNMP IOCTL requests with an out-of-bounds length. A local,
  unprivileged user could use this flaw to crash the system or, potentially,
  escalate their privileges on the system. (CVE-2013-6381, Important)

• A flaw was found in the way the get_dumpable() function return value was
  interpreted in the ptrace subsystem of the Linux kernel. When
  'fs.suid_dumpable' was set to 2, a local, unprivileged local user could
  use this flaw to bypass intended ptrace restrictions and obtain
  potentially sensitive information. (CVE-2013-2929, Low)

• It was found that certain protocol handlers in the Linux kernel's
  networking implementation could set the addr_len value without initializing
  the associated data structure. A local, unprivileged user could use this
  flaw to leak kernel stack memory to user space using the recvmsg, recvfrom,
  and recvmmsg system calls (CVE-2013-7263, CVE-2013-7265, Low).

This update also fixes several bugs.

Bugs fixed (https://bugzilla.redhat.com/):

1028148 - CVE-2013-2929 kernel: exec/ptrace: get_dumpable() incorrect tests
1033600 - CVE-2013-6381 Kernel: qeth: buffer overflow in snmp ioctl
1035875 - CVE-2013-7263 CVE-2013-7265 Kernel: net: leakage of uninitialized memory to user-space via recv syscalls

Issue Links

• is related to: LU-4628 Kernel update [RHEL6.5 2.6.32-431.5.1.el6]

Comments

[Jay Lan (Inactive)]

Plan to land this one for 2.4.x also?

[Peter Jones]

Landed for 2.5.1 and 2.6

[Bob Glossman (Inactive)]

in b2_5:
http://review.whamcloud.com/9318

[Bob Glossman (Inactive)]

client builds failing. apparently need some TEI work for the new version. example errors:

+++ yumdownloader --destdir /var/lib/jenkins/lbuild-data/kernelrpm/2.6.32/rhel6/i686/yum61HYOn kernel-devel-2.6.32-431.5.1.el6
+++ fatal 1 'failed to fetch kernel-devel-2.6.32-431.5.1.el6 with yumdownloader.'
+++ cleanup
+++ true
+++ error 'failed to fetch kernel-devel-2.6.32-431.5.1.el6 with yumdownloader.'
+++ local 'msg=failed to fetch kernel-devel-2.6.32-431.5.1.el6 with yumdownloader.'
+++ '[' -n 'failed to fetch kernel-devel-2.6.32-431.5.1.el6 with yumdownloader.' ']'
+++ echo -e '\nlbuild: failed to fetch kernel-devel-2.6.32-431.5.1.el6 with yumdownloader.'

lbuild: failed to fetch kernel-devel-2.6.32-431.5.1.el6 with yumdownloader.

will enter a new TEI ticket

[Bob Glossman (Inactive)]

http://review.whamcloud.com/9253