[LU-6698] Kernel update [RHEL6.6 2.6.32-504.23.4.el6]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.8.0
• Severity: 3
• Assignee: Bob Glossman (Inactive)
• Reporter: Bob Glossman (Inactive)

Description

• It was found that the Linux kernel's Infiniband subsystem did not
  properly sanitize input parameters while registering memory regions from
  user space via the (u)verbs API. A local user with access to a
  /dev/infiniband/uverbsX device could use this flaw to crash the system or,
  potentially, escalate their privileges on the system. (CVE-2014-8159,
  Important)

• It was found that the Linux kernel's implementation of vectored pipe read
  and write functionality did not take into account the I/O vectors that were
  already processed when retrying after a failed atomic access operation,
  potentially resulting in memory corruption due to an I/O vector array
  overrun. A local, unprivileged user could use this flaw to crash the system
  or, potentially, escalate their privileges on the system. (CVE-2015-1805,
  Important)

• A buffer overflow flaw was found in the way the Linux kernel's Intel
  AES-NI instructions optimized version of the RFC4106 GCM mode decryption
  functionality handled fragmented packets. A remote attacker could use this
  flaw to crash, or potentially escalate their privileges on, a system over a
  connection with an active AES-GCM mode IPSec security association.
  (CVE-2015-3331, Important)

• An information leak flaw was found in the way the Linux kernel changed
  certain segment registers and thread-local storage (TLS) during a context
  switch. A local, unprivileged user could use this flaw to leak the user
  space TLS base address of an arbitrary process. (CVE-2014-9419, Low)

• It was found that the Linux kernel's ISO file system implementation did
  not correctly limit the traversal of Rock Ridge extension Continuation
  Entries (CE). An attacker with physical access to the system could use this
  flaw to trigger an infinite loop in the kernel, resulting in a denial of
  service. (CVE-2014-9420, Low)

• An information leak flaw was found in the way the Linux kernel's Virtual
  Dynamic Shared Object (vDSO) implementation performed address
  randomization. A local, unprivileged user could use this flaw to leak
  kernel memory addresses to user-space. (CVE-2014-9585, Low)

Bugs fixed (https://bugzilla.redhat.com/):

1175235 - CVE-2014-9420 Kernel: fs: isofs: infinite loop in CE record entries
1177260 - CVE-2014-9419 kernel: partial ASLR bypass through TLS base addresses leak
1181054 - CVE-2014-9585 kernel: ASLR bruteforce possible for vdso library
1181166 - CVE-2014-8159 kernel: infiniband: uverbs: unprotected physical memory access
1202855 - CVE-2015-1805 kernel: pipe: iovec overrun leading to memory corruption
1213322 - CVE-2015-3331 Kernel: crypto: buffer overruns in RFC4106 implementation using AESNI