https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-9144 Lustre <p>Security Fix(es):</p> <ul> <li>A use-after-free flaw was found in the way the Linux kernel's Datagram<br/> Congestion Control Protocol (DCCP) implementation freed SKB (socket buffer)<br/> resources for a DCCP_PKT_REQUEST packet when the IPV6_RECVPKTINFO option is set<br/> on the socket. A local, unprivileged user could use this flaw to alter the<br/> kernel memory, allowing them to escalate their privileges on the system.<br/> (CVE-2017-6074, Important)</li> </ul> <p>Bugs fixed (<a href="https://bugzilla.redhat.com/):" class="external-link" target="_blank" rel="nofollow noopener">https://bugzilla.redhat.com/):</a></p> <p>1423071 - CVE-2017-6074 kernel: use after free in dccp protocol</p> LU-9144

kernel update [RHEL6.8 2.6.32-642.13.2.el6]

Bug Minor Resolved Fixed Bob Glossman Bob Glossman Wed, 22 Feb 2017 17:15:04 +0000 Tue, 11 Sep 2018 20:49:26 +0000 Tue, 11 Sep 2018 20:49:26 +0000 0 3 <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="https://review.whamcloud.com/25597" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/25597</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-9144" title="kernel update [RHEL6.8 2.6.32-642.13.2.el6]" class="issue-link" data-issue-key="LU-9144"><del>LU-9144</del></a> kernel: kernel update RHEL6.8 <span class="error">&#91;2.6.32-642.13.2.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 501d49f6023cdfd5a54ad39f154d9b37a0173384</p> <p>This ticket is now obsolete. There is already a later kernel version update for el6; <a href="https://jira.whamcloud.com/browse/LU-9148" title="kernel update [RHEL6.8 2.6.32-642.15.1.el6]" class="issue-link" data-issue-key="LU-9148"><del>LU-9148</del></a>.</p> <p>This change only affects clients that should be running a patchless client anyway. though I guess we don't have weak updates in EE3 yet?</p> Related LU-9148 Development Rank 1|hzz4nj: Rank (Obsolete) 9223372036854775807 Severity