[LU-8692] kernel update [RHEL7.2 3.10.0-327.36.2.el7]

• Status: Resolved
• Project: Lustre
• Fix Version/s: Lustre 2.9.0
• Type: Bug
• Priority: Minor
• Reporter: Bob Glossman (Inactive)
• Assignee: Bob Glossman (Inactive)
• Resolution: Fixed
• Severity: 3

Description

Security Fix(es):

• Linux kernel built with the 802.1Q/802.1ad VLAN(CONFIG_VLAN_8021Q) OR Virtual
  eXtensible Local Area Network(CONFIG_VXLAN) with Transparent Ethernet
  Bridging(TEB) GRO support, is vulnerable to a stack overflow issue. It could
  occur while receiving large packets via GRO path as an unlimited recursion could
  unfold in both VLAN and TEB modules leading to a stack corruption in the kernel.
  (CVE-2016-7039, Important)

Bugs fixed (https://bugzilla.redhat.com/):

1375944 - CVE-2016-7039 kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash

Comments

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: http://review.whamcloud.com/23102
Subject: LU-8692 kernel: kernel update RHEL7.2 [3.10.0-327.36.2.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 07552fe9c388379485103772e479104491cbf287

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch http://review.whamcloud.com/23102/
Subject: LU-8692 kernel: kernel update RHEL7.2 [3.10.0-327.36.2.el7]
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: b4d1883392e3e6d01ba0a4fd2fdd12fdcc2cc277

[Peter Jones]

Landed for 2.9