[LU-8692] kernel update [RHEL7.2 3.10.0-327.36.2.el7]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.9.0
• Severity: 3
• Assignee: Bob Glossman (Inactive)
• Reporter: Bob Glossman (Inactive)

Description

Security Fix(es):

• Linux kernel built with the 802.1Q/802.1ad VLAN(CONFIG_VLAN_8021Q) OR Virtual
  eXtensible Local Area Network(CONFIG_VXLAN) with Transparent Ethernet
  Bridging(TEB) GRO support, is vulnerable to a stack overflow issue. It could
  occur while receiving large packets via GRO path as an unlimited recursion could
  unfold in both VLAN and TEB modules leading to a stack corruption in the kernel.
  (CVE-2016-7039, Important)

Bugs fixed (https://bugzilla.redhat.com/):

1375944 - CVE-2016-7039 kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash