Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-6048

Kernel update [RHEL7 3.10.0-123.13.2.el7]

Details

    • Bug
    • Resolution: Fixed
    • Major
    • Lustre 2.7.0
    • None
    • None
    • 3
    • 16854

    Description

      • A flaw was found in the way the Linux kernel handled GS segment register
        base switching when recovering from a #SS (stack segment) fault on an
        erroneous return to user space. A local, unprivileged user could use this
        flaw to escalate their privileges on the system. (CVE-2014-9322, Important)

      Bugs fixed (https://bugzilla.redhat.com/):

      1172806 - CVE-2014-9322 kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

      Attachments

        Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-6063 conf-sanity test_76a fails on RHEL7, SLES12

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Activity

            [LU-6048] Kernel update [RHEL7 3.10.0-123.13.2.el7]
            jlevi Jodi Levi (Inactive) made changes -
            Resolution New: Fixed [ 1 ]
            Status Original: Open [ 1 ] New: Resolved [ 5 ]
            jlevi Jodi Levi (Inactive) made changes -
            Fix Version/s New: Lustre 2.7.0 [ 10631 ]
            adilger Andreas Dilger made changes -
            Link New: This issue is related to LU-6063 [ LU-6063 ]
            bogl Bob Glossman (Inactive) made changes -
            Description Original: * A flaw was found in the way the Linux kernel handled GS segment register
            base switching when recovering from a #SS (stack segment) fault on an
            erroneous return to user space. A local, unprivileged user could use this
            flaw to escalate their privileges on the system. (CVE-2014-9322, Important)
            		 New: * A flaw was found in the way the Linux kernel handled GS segment register
            base switching when recovering from a #SS (stack segment) fault on an
            erroneous return to user space. A local, unprivileged user could use this
            flaw to escalate their privileges on the system. (CVE-2014-9322, Important)

            Bugs fixed (https://bugzilla.redhat.com/):

            1172806 - CVE-2014-9322 kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility
            bogl Bob Glossman (Inactive) made changes -
            Summary Original: kernel update [RHEL7 3.10.0-123.13.2.el7] New: Kernel update [RHEL7 3.10.0-123.13.2.el7]
            bogl Bob Glossman (Inactive) created issue -

            People

              bogl Bob Glossman (Inactive)
              bogl Bob Glossman (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: