https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-9143 Lustre <p>Security Fix(es):</p> <ul> <li>A use-after-free flaw was found in the way the Linux kernel's Datagram<br/> Congestion Control Protocol (DCCP) implementation freed SKB (socket buffer)<br/> resources for a DCCP_PKT_REQUEST packet when the IPV6_RECVPKTINFO option is set<br/> on the socket. A local, unprivileged user could use this flaw to alter the<br/> kernel memory, allowing them to escalate their privileges on the system.<br/> (CVE-2017-6074, Important)</li> </ul> <p>Bugs fixed (<a href="https://bugzilla.redhat.com/):" class="external-link" target="_blank" rel="nofollow noopener">https://bugzilla.redhat.com/):</a></p> <p>1423071 - CVE-2017-6074 kernel: use after free in dccp protocol</p> LU-9143

kernel update [RHEL7.3 3.10.0-514.6.2.el7]

Bug Minor Resolved Fixed Bob Glossman Bob Glossman Wed, 22 Feb 2017 17:11:18 +0000 Tue, 11 Sep 2018 20:49:38 +0000 Tue, 11 Sep 2018 20:49:38 +0000 0 3 <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="https://review.whamcloud.com/25598" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/25598</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-9143" title="kernel update [RHEL7.3 3.10.0-514.6.2.el7]" class="issue-link" data-issue-key="LU-9143"><del>LU-9143</del></a> kernel: kernel update RHEL7.3 <span class="error">&#91;3.10.0-514.6.2.el7&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: a1a3dabb8147b79bb60c72100963e703393c12bb</p> <p>this one is a serious bug on the clients that people would want fixed.<br/> Luckily it's just hte clients, but unfortunately we don't have EE3.0 supportign weak updates yet even with patchless clients, or do we?</p> <p>This ticket is obsolete. There's already a later kernel update; <a href="https://jira.whamcloud.com/browse/LU-9174" title="kernel update [RHEL7.3 3.10.0-514.10.2.el7]" class="issue-link" data-issue-key="LU-9174"><del>LU-9174</del></a>. It can be landed instead.</p> Related LU-9174 Development Rank 1|hzz4nb: Rank (Obsolete) 9223372036854775807 Severity