https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-9686 Lustre <p>Security Fix(es):</p> <ul> <li>A flaw was found in the way memory was being allocated on the stack for user<br/> space binaries. If heap (or different memory region) and stack memory regions<br/> were adjacent to each other, an attacker could use this flaw to jump over the<br/> stack guard gap, cause controlled memory corruption on process stack or the<br/> adjacent memory region, and thus increase their privileges on the system. This<br/> is a kernel-side mitigation which increases the stack guard gap size from one<br/> page to 1 MiB to make successful exploitation of this issue more difficult.<br/> (CVE-2017-1000364, Important)</li> </ul> <p>Bugs fixed (<a href="https://bugzilla.redhat.com/):" class="external-link" target="_blank" rel="nofollow noopener">https://bugzilla.redhat.com/):</a></p> <p>1461333 - CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations</p> LU-9686

kernel update [RHEL7.3 3.10.0-514.21.2.el7]

Bug Minor Resolved Fixed Bob Glossman Bob Glossman Mon, 19 Jun 2017 19:33:01 +0000 Tue, 11 Sep 2018 20:49:06 +0000 Tue, 11 Sep 2018 20:49:06 +0000 0 2 <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="https://review.whamcloud.com/27759" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/27759</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-9686" title="kernel update [RHEL7.3 3.10.0-514.21.2.el7]" class="issue-link" data-issue-key="LU-9686"><del>LU-9686</del></a> kernel: kernel update RHEL7.3 <span class="error">&#91;3.10.0-514.21.2.el7&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 3cd40681978cb78aeb18395adc4365a01ff11aa9</p> Related LU-9561 LU-9717 Development Rank 1|hzzfdj: Rank (Obsolete) 9223372036854775807 Severity