https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-12792 Lustre <p>Security Fix(es):</p> <ul class="alternate" type="square"> <li>A buffer overflow flaw was found in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. (CVE-2019-14835)</li> </ul> <p><a href="https://access.redhat.com/errata/product/69/ver=/rhel---7/x86_64/RHSA-2019:2829" class="external-link" target="_blank" rel="nofollow noopener">https://access.redhat.com/errata/product/69/ver=/rhel---7/x86_64/RHSA-2019:2829</a></p> LU-12792

kernel update [RHEL7.7 3.10.0-1062.1.2.el7]

Bug Minor Resolved Won't Fix Jian Yu Jian Yu Fri, 20 Sep 2019 17:49:07 +0000 Tue, 12 Nov 2019 22:12:38 +0000 Tue, 12 Nov 2019 22:12:38 +0000 0 2 <p>Jian Yu (yujian@whamcloud.com) uploaded a new patch: <a href="https://review.whamcloud.com/36247" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/36247</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-12792" title="kernel update [RHEL7.7 3.10.0-1062.1.2.el7]" class="issue-link" data-issue-key="LU-12792"><del>LU-12792</del></a> kernel: kernel update RHEL7.7 <span class="error">&#91;3.10.0-1062.1.2.el7&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 9ec0374a5eed69c98a204200ba512c64b325a11b</p> <p>Jian Yu (yujian@whamcloud.com) uploaded a new patch: <a href="https://review.whamcloud.com/36248" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/36248</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-12792" title="kernel update [RHEL7.7 3.10.0-1062.1.2.el7]" class="issue-link" data-issue-key="LU-12792"><del>LU-12792</del></a> kernel: kernel update RHEL7.7 <span class="error">&#91;3.10.0-1062.1.2.el7&#93;</span><br/> Project: fs/lustre-release<br/> Branch: b2_12<br/> Current Patch Set: 1<br/> Commit: 0f95968e62f68f08f47169c9384a0bf95e11ae43</p> <p>New kernel version is available: <a href="https://jira.whamcloud.com/browse/LU-12964" title="kernel update [RHEL7.7 3.10.0-1062.4.2.el7]" class="issue-link" data-issue-key="LU-12964"><del>LU-12964</del></a> kernel update <span class="error">&#91;RHEL7.7 3.10.0-1062.4.2.el7&#93;</span></p> Related LU-12724 LU-12891 Development Rank 1|i00n2v: Rank (Obsolete) 9223372036854775807 Severity