[LU-6048] Kernel update [RHEL7 3.10.0-123.13.2.el7]

• Type: Bug
• Resolution: Fixed
• Priority: Major
• Fix Version/s: Lustre 2.7.0
• Severity: 3
• Assignee: Bob Glossman (Inactive)
• Reporter: Bob Glossman (Inactive)

Description

• A flaw was found in the way the Linux kernel handled GS segment register
  base switching when recovering from a #SS (stack segment) fault on an
  erroneous return to user space. A local, unprivileged user could use this
  flaw to escalate their privileges on the system. (CVE-2014-9322, Important)

Bugs fixed (https://bugzilla.redhat.com/):

1172806 - CVE-2014-9322 kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

Issue Links

• is related to: LU-6063 conf-sanity test_76a fails on RHEL7, SLES12