[LU-10340] kernel update [SLES12 SP2 4.4.90-92.50]

• Status: Resolved
• Project: Lustre
• Type: Bug
• Priority: Minor
• Reporter: Bob Glossman (Inactive)
• Assignee: Bob Glossman (Inactive)
• Resolution: Won't Fix
• Severity: 3

Description

The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2017-1000405: A bug in the THP CoW support could be used by local attackers to corrupt memory of other processes and cause them to crash (bnc#1069496).
• CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bnc#1069702).

The following non-security bugs were fixed:

Fix a build issue on ppc64le systems (bsc#1070805)

Issue Links

• is related to: LU-10168 kernel update [SLES12 SP2 4.4.90-92.45]
• is related to: LU-10427 kernel update [SLES12 SP2 4.4.103-92.53]

Comments

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: https://review.whamcloud.com/30426
Subject: LU-10340 kernel: kernel update [SLES12 SP2 4.4.90-92.50]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 908ca3b8dc9087dd9dfd7ca23dc9260050e037f6

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: https://review.whamcloud.com/30428
Subject: LU-10340 kernel: kernel update [SLES12 SP2 4.4.90-92.50]
Project: fs/lustre-release
Branch: b2_10
Current Patch Set: 1
Commit: 40dfddfa53f61854a0fd8b8ec1232f329481a260

[Bob Glossman (Inactive)]

now obsolete. replaced by LU-10427, a later version update.