[LU-9882] kernel update [RHEL7.4 3.10.0-693.1.1.el7]

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.11.0
• Severity: 3
• Assignee: Bob Glossman (Inactive)
• Reporter: Bob Glossman (Inactive)

Description

Security Fix(es):

A race condition was found in the Linux kernel, present since v3.14-rc1 through v4.12. The race happens between threads of inotify_handle_event() and vfs_rename() while running the rename operation against the same file. As a result of the race the next slab data or the slab's free list pointer can be corrupted with attacker-controlled data. (CVE-2017-7533, Important)

Bug Fix(es):

Previously, direct I/O read operations going past EOF returned an invalid error number, instead of reading 0 bytes and returning success, if these operations were in same XFS block with EOF. Consequently, creating multiple VMs from a Red Hat Enterprise Linux 7.4 template caused all the VMs to become unresponsive in the 'Image Locked' state. This update fixes the direct I/O feature of the file system, and VMs created from a Red Hat Enterprise Linux 7.4 template now work as expected. (BZ#1475669)

Bugs fixed (https://bugzilla.redhat.com/):

BZ - 1468283 - CVE-2017-7533 kernel: a race between inotify_handle_event() and sys_rename()

Issue Links

• has to be done after: LU-9816 kernel upgrade [RHEL7.4 3.10.0-693.el7]
• is related to: LU-9944 kernel update [RHEL7.4 3.10.0-693.2.1.el7]

Comments

[Peter Jones]

Landed for 2.11

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/28555/
Subject: LU-9882 kernel: kernel update RHEL7.4 [3.10.0-693.1.1.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: e25c0f1a8595d65f62945de11dc2cf80409a5cc8

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: https://review.whamcloud.com/28611
Subject: LU-9882 kernel: kernel update RHEL7.4 [3.10.0-693.1.1.el7]
Project: fs/lustre-release
Branch: b2_10
Current Patch Set: 1
Commit: 5a0126d0c75b1e32916b17418aa268b33e63d5c7

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: https://review.whamcloud.com/28555
Subject: LU-9882 kernel: kernel update RHEL7.4 [3.10.0-693.1.1.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 0b79acaa046cff5d35e56bfdd5bafe96b650b3a2