https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-10037 Lustre <p>Security Fix(es):</p> <p>A flaw was found in the way the Linux kernel loaded ELF executables. Provided that an application was built as Position Independent Executable (PIE), the loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption. An unprivileged local user with access to SUID (or otherwise privileged) PIE binary could use this flaw to escalate their privileges on the system. (CVE-2017-1000253, Important)</p> <p>Bugs fixed (<a href="https://bugzilla.redhat.com/):" class="external-link" target="_blank" rel="nofollow noopener">https://bugzilla.redhat.com/):</a></p> <p>BZ - 1492212 - CVE-2017-1000253 kernel: load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary</p> LU-10037

kernel update [RHEL6.9 2.6.32-696.10.3.el6]

Bug Minor Resolved Won't Fix Bob Glossman Bob Glossman Wed, 27 Sep 2017 01:38:45 +0000 Sat, 7 Oct 2017 14:48:07 +0000 Sat, 7 Oct 2017 14:48:07 +0000 0 2 <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="https://review.whamcloud.com/29247" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/29247</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-10037" title="kernel update [RHEL6.9 2.6.32-696.10.3.el6]" class="issue-link" data-issue-key="LU-10037"><del>LU-10037</del></a> kernel: kernel update RHEL6.9 <span class="error">&#91;2.6.32-696.10.3.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: b11069421799683308e2de48cca1727baf30194a</p> <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="https://review.whamcloud.com/29248" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/29248</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-10037" title="kernel update [RHEL6.9 2.6.32-696.10.3.el6]" class="issue-link" data-issue-key="LU-10037"><del>LU-10037</del></a> kernel: kernel update RHEL6.9 <span class="error">&#91;2.6.32-696.10.3.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: b2_10<br/> Current Patch Set: 1<br/> Commit: 092b3c2ef157f645421e851aa5ad166199829de3</p> <p>John L. Hammond (john.hammond@intel.com) merged in patch <a href="https://review.whamcloud.com/29248/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/29248/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-10037" title="kernel update [RHEL6.9 2.6.32-696.10.3.el6]" class="issue-link" data-issue-key="LU-10037"><del>LU-10037</del></a> kernel: kernel update RHEL6.9 <span class="error">&#91;2.6.32-696.10.3.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: b2_10<br/> Current Patch Set: <br/> Commit: c24484c74dc833b22d742f80c305c4ad380146b5</p> <p>replaced by <a href="https://jira.whamcloud.com/browse/LU-10088" title="kernel update [RHEL6.9 2.6.32-696.13.2.el6]" class="issue-link" data-issue-key="LU-10088"><del>LU-10088</del></a>, a later version update</p> Related LU-9979 LU-10088 Development Rank 1|hzzkvj: Rank (Obsolete) 9223372036854775807 Severity