[LU-12791] kernel update [RHEL8.0 4.18.0-80.11.2.el8_0]

• Status: Resolved
• Project: Lustre
• Fix Version/s: Lustre 2.14.0, Lustre 2.12.4
• Type: Bug
• Priority: Minor
• Reporter: Jian Yu
• Assignee: Jian Yu
• Resolution: Fixed
• Severity: 3

Description

Security Fix(es):

• A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835)

https://access.redhat.com/errata/RHSA-2019:2827?sc_cid=701600000006NHXAA2

Issue Links

• is related to: LU-12762 kernel update [RHEL8.0 4.18.0-80.11.1...

Comments

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/36527
Subject: LU-12791 kernel: kernel update RHEL 8.0 [4.18.0-80.11.2.el8_0]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 3ed32cf7d4e6a317fb1f4a87f121e157edb64a71

[Gerrit Updater]

Jian Yu ([e-mail]) uploaded a new patch: https://review.whamcloud.com/36528
Subject: LU-12791 kernel: kernel update RHEL 8.0 [4.18.0-80.11.2.el8_0]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: d61a128c42b3debac340d67b120d20fe927f516a

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/36528/
Subject: LU-12791 kernel: kernel update RHEL 8.0 [4.18.0-80.11.2.el8_0]
Project: fs/lustre-release
Branch: b2_12
Current Patch Set:
Commit: a33440f98b77ab8fe81f68ec12f108d650536cc3

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/36527/
Subject: LU-12791 kernel: kernel update RHEL 8.0 [4.18.0-80.11.2.el8_0]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: efe0ce6cca8f426b6b55b1a520492c99c3bff0dd