[LU-5804] Kernel update RHEL6.5 [2.6.32-431.37.1.el6]

• Type: Bug
• Resolution: Won't Fix
• Priority: Minor
• Affects Version/s: Lustre 2.7.0, Lustre 2.5.3
• Severity: 3
• Assignee: Yang Sheng
• Reporter: Yang Sheng

Description

• A NULL pointer dereference flaw was found in the way the Linux kernel's
  Stream Control Transmission Protocol (SCTP) implementation handled
  simultaneous connections between the same hosts. A remote attacker could
  use this flaw to crash the system. (CVE-2014-5077, Important)

Bugs fixed (https://bugzilla.redhat.com/):

1122982 - CVE-2014-5077 Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions