[LU-12608] kernel update [RHEL7.6 3.10.0-957.27.2.el7]

• Status: Resolved
• Project: Lustre
• Fix Version/s: Lustre 2.13.0, Lustre 2.12.3
• Type: Bug
• Priority: Minor
• Reporter: Jian Yu
• Assignee: Jian Yu
• Resolution: Fixed
• Severity: 3

Description

Security Fix(es):

• kernel: nfs: use-after-free in svc_process_common() (CVE-2018-16884)
• kernel: insufficient input validation in kernel mode driver in Intel i915 graphics leads to - privilege escalation (CVE-2019-11085)
• kernel: nfs: NULL pointer dereference due to an anomalized NFS message sequence (CVE-2018-16871)
• kernel: use-after-free in drivers/char/ipmi/ipmi_si_intf.c, ipmi_si_mem_io.c, ipmi_si_port_io.c (CVE-2019-11811)

https://access.redhat.com/errata/RHSA-2019:1873?sc_cid=701600000006NHXAA2

Issue Links

• is related to: LU-12458 kernel update [RHEL7.6 3.10.0-957.21....

Comments

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/35638
Subject: LU-12608 kernel: kernel update RHEL7.6 [3.10.0-957.27.2.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: d862aa4040481cdba6f1263e71e69226eb134886

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/35639
Subject: LU-12608 kernel: kernel update RHEL7.6 [3.10.0-957.27.2.el7]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: dcf91070cf77cbd1e0d1ae200dd37fae4d2a1615

[James A Simmons]

We are missing 

lustre/kernel_patches/kernel_configs/

kernel-3.10.0-3.10-rhel7.7-x86_64.config

[Gerrit Updater]

James Simmons ([e-mail]) uploaded a new patch: https://review.whamcloud.com/35810
Subject: LU-12608 kernel: add missing kernel config
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 92e6a38461414fc5516c974e284bbca116c67528

[Jian Yu]

Hi James,
The config file was included in https://review.whamcloud.com/35727, which has not landed yet.

[James A Simmons]

Currently all builds are broken since RHEL7.7 client testing was turned on for Maloo.

[Jian Yu]

I see. It seems Minh has made the failed RHEL 7.7 server build skipped, so the recent builds passed.

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/35638/
Subject: LU-12608 kernel: kernel update RHEL7.6 [3.10.0-957.27.2.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: e4b49208f498a320a54a40378ae4ff3b428aa043

[Peter Jones]

Landed for 2.13

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/35639/
Subject: LU-12608 kernel: kernel update RHEL7.6 [3.10.0-957.27.2.el7]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set:
Commit: a58712cef72698d462b5ca0be9ebd1793e0bd89d