[LU-6048] Kernel update [RHEL7 3.10.0-123.13.2.el7]

• Status: Resolved
• Project: Lustre
• Fix Version/s: Lustre 2.7.0
• Type: Bug
• Priority: Major
• Reporter: Bob Glossman (Inactive)
• Assignee: Bob Glossman (Inactive)
• Resolution: Fixed
• Severity: 3

Description

• A flaw was found in the way the Linux kernel handled GS segment register
  base switching when recovering from a #SS (stack segment) fault on an
  erroneous return to user space. A local, unprivileged user could use this
  flaw to escalate their privileges on the system. (CVE-2014-9322, Important)

Bugs fixed (https://bugzilla.redhat.com/):

1172806 - CVE-2014-9322 kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

Issue Links

• is related to: LU-6063 conf-sanity test_76a fails on RHEL7, ...

Comments

[Bob Glossman (Inactive)]

I note that RedHat announced this kernel update only a few days after the last one for el7. I take that to mean that it's relatively important and urgent.

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: http://review.whamcloud.com/13153
Subject: LU-6048 kernel: kernel update [RHEL7 3.10.0-123.13.2.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 51203d12f633ef584d5bfe4317d23e99d6bae464

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: http://review.whamcloud.com/13168
Subject: LU-6048 test: force el7 test run
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 36587157b6fced3229dbafdd1d93a5314d19e402

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch http://review.whamcloud.com/13153/
Subject: LU-6048 kernel: kernel update [RHEL7 3.10.0-123.13.2.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: dd084b62170ecb59add9ab571c0352b66bb276bd

[James A Simmons]

This patch has landed. We can close this.

[Jodi Levi (Inactive)]

Patch landed to Master.