https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-8389 Lustre <p>Security Fix:</p> <ul> <li>A flaw was found in the way certain interfaces of the Linux kernel's<br/> Infiniband subsystem used write() as bi-directional ioctl() replacement, which<br/> could lead to insufficient memory security checks when being invoked using the<br/> the splice() system call. A local unprivileged user on a system with either<br/> Infiniband hardware present or RDMA Userspace Connection Manager Access module<br/> explicitly loaded, could use this flaw to escalate their privileges on the<br/> system. (CVE-2016-4565, Important)</li> </ul> <p>This update also fixes the following bugs:</p> <ul> <li>When providing some services and using the Integrated Services Digital Network<br/> (ISDN), the system could terminate unexpectedly due to the call of the<br/> tty_ldisc_flush() function. The provided patch removes this call and the system<br/> no longer hangs in the described scenario. (BZ#1337443)</li> </ul> <ul> <li>An update to the Red Hat Enterprise Linux 6.8 kernel added calls of two<br/> functions provided by the ipv6.ko kernel module, which added a dependency on<br/> that module. On systems where ipv6.ko was prevented from being loaded, the<br/> nfsd.ko and lockd.ko modules were unable to be loaded. Consequently, it was not<br/> possible to run an NFS server or to mount NFS file systems as a client. The<br/> underlying source code has been fixed by adding the symbol_get() function, which<br/> determines if nfsd.ko and lock.ko are loaded into memory and calls them through<br/> function pointers, not directly. As a result, the aforementioned kernel modules<br/> are allowed to be loaded even if ipv6.ko is not, and the NFS mount works as<br/> expected. (BZ#1341496)</li> </ul> <ul> <li>After upgrading the kernel, CPU load average increased compared to the prior<br/> kernel version due to the modification of the scheduler. The provided patch set<br/> reverts the calculation algorithm of this load average to the the previous<br/> version thus resulting in relatively lower values under the same system load.<br/> (BZ#1343015)</li> </ul> <p>Bugs fixed (<a href="https://bugzilla.redhat.com/):" class="external-link" target="_blank" rel="nofollow noopener">https://bugzilla.redhat.com/):</a></p> <p>1310570 - CVE-2016-4565 kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko</p> LU-8389

kernel update [RHEL6.8 2.6.32-642.3.1.el6]

Bug Minor Resolved Fixed Bob Glossman Bob Glossman Tue, 12 Jul 2016 16:01:40 +0000 Mon, 12 Sep 2016 15:55:30 +0000 Tue, 26 Jul 2016 19:45:10 +0000 Lustre 2.9.0 0 3 <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="http://review.whamcloud.com/21279" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/21279</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8389" title="kernel update [RHEL6.8 2.6.32-642.3.1.el6]" class="issue-link" data-issue-key="LU-8389"><del>LU-8389</del></a> kernel: kernel update RHEL6.8 <span class="error">&#91;2.6.32-642.3.1.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: b3187f92310587468079cf4087492fcecee16885</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/21279/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/21279/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8389" title="kernel update [RHEL6.8 2.6.32-642.3.1.el6]" class="issue-link" data-issue-key="LU-8389"><del>LU-8389</del></a> kernel: kernel update RHEL6.8 <span class="error">&#91;2.6.32-642.3.1.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: f0ed14ded21879ce884c432f6eaa6e7b1c54b7c4</p> <p>Landed to master for 2.9.0</p> Related Development Rank 1|hzyh7z: Rank (Obsolete) 9223372036854775807 Severity