https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-5025 Lustre <ul> <li>A flaw was found in the way the Linux kernel's netfilter connection<br/> tracking implementation for Datagram Congestion Control Protocol (DCCP)<br/> packets used the skb_header_pointer() function. A remote attacker could use<br/> this flaw to send a specially crafted DCCP packet to crash the system or,<br/> potentially, escalate their privileges on the system. (CVE-2014-2523,<br/> Important)</li> </ul> <ul> <li>A flaw was found in the way the Linux kernel's Adaptec RAID controller<br/> (aacraid) checked permissions of compat IOCTLs. A local attacker could use<br/> this flaw to bypass intended security restrictions. (CVE-2013-6383,<br/> Moderate)</li> </ul> <ul> <li>A flaw was found in the way the handle_rx() function handled large<br/> network packets when mergeable buffers were disabled. A privileged guest<br/> user could use this flaw to crash the host or corrupt QEMU process memory<br/> on the host, which could potentially result in arbitrary code execution on<br/> the host with the privileges of the QEMU process. (CVE-2014-0077, Moderate)</li> </ul> LU-5025

Kernel update [RHEL6.5 2.6.32-431.17.1.el6]

Bug Critical Resolved Fixed Bob Glossman Bob Glossman Wed, 7 May 2014 19:02:31 +0000 Wed, 14 May 2014 22:31:38 +0000 Mon, 12 May 2014 12:46:44 +0000 Lustre 2.6.0 Lustre 2.6.0 Lustre 2.5.2 0 3 <p>This kernel update includes the fix we've been waiting for to repair <a href="https://jira.whamcloud.com/browse/LU-4638" title="racer test hung: /mnt/lustre is still busy, wait one second" class="issue-link" data-issue-key="LU-4638"><del>LU-4638</del></a>.</p> <p>I think Kelsey accidentally hit "assign to me" <img class="emoticon" src="https://jira.whamcloud.com/images/icons/emoticons/smile.png" height="16" width="16" align="absmiddle" alt="" border="0"/></p> <p>Updating my images to this kernel. Will be testing it starting today.</p> <p>in master: <a href="http://review.whamcloud.com/10282" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/10282</a><br/> in b2_5: <a href="http://review.whamcloud.com/10283" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/10283</a></p> <p>Landed for 2.6. Will track landing for b2_5 separately</p> Related LU-4638 Development Rank 1|hzwm2n: Rank (Obsolete) 13906 Severity