[LU-8758] kernel update [RHEL6.8 2.6.32-642.6.2.el6]

• Status: Resolved
• Project: Lustre
• Type: Bug
• Priority: Minor
• Reporter: Bob Glossman (Inactive)
• Assignee: Bob Glossman (Inactive)
• Resolution: Fixed
• Severity: 3

Description

Security Fix(es):

• A race condition was found in the way the Linux kernel's memory subsystem
  handled the copy-on-write (COW) breakage of private read-only memory mappings.
  An unprivileged, local user could use this flaw to gain write access to
  otherwise read-only memory mappings and thus increase their privileges on the
  system. (CVE-2016-5195, Important)

Bugs fixed (https://bugzilla.redhat.com/):

1384344 - CVE-2016-5195 kernel: mm: privilege escalation via MAP_PRIVATE COW breakage

Issue Links

• is related to: LU-8751 kernel update [RHEL7.2 3.10.0-327.36....

Comments

[Gerrit Updater]

Bob Glossman ([e-mail]) uploaded a new patch: http://review.whamcloud.com/23396
Subject: LU-8758 kernel: kernel update RHEL6.8 [2.6.32-642.6.2.el6]
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: ce6142dde761f983ec577f5e70a8c272924d0276

[Kevin J Moran (Inactive)]

Will there be a new Lustre client package built for this kernel update? We have customers that will be upgrading their user/compute nodes.

[Peter Jones]

Kevin

From a community release point of view, we expect to include this update in the 2.9 release. I suggest that you open a ticket through support channels if you have a question about maintenance releases

Peter