https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-9687 Lustre <p>Security Fix(es):</p> <ul> <li>A flaw was found in the way memory was being allocated on the stack for user<br/> space binaries. If heap (or different memory region) and stack memory regions<br/> were adjacent to each other, an attacker could use this flaw to jump over the<br/> stack guard gap, cause controlled memory corruption on process stack or the<br/> adjacent memory region, and thus increase their privileges on the system. This<br/> is a kernel-side mitigation which increases the stack guard gap size from one<br/> page to 1 MiB to make successful exploitation of this issue more difficult.<br/> (CVE-2017-1000364, Important)</li> </ul> <p>Bugs fixed (<a href="https://bugzilla.redhat.com/):" class="external-link" target="_blank" rel="nofollow noopener">https://bugzilla.redhat.com/):</a></p> <p>1461333 - CVE-2017-1000364 kernel: heap/stack gap jumping via unbounded stack allocations</p> LU-9687

kernel update [RHEL6.9 2.6.32-696.3.2.el6]

Bug Minor Resolved Won't Fix Bob Glossman Bob Glossman Mon, 19 Jun 2017 19:36:22 +0000 Fri, 14 Jul 2017 04:31:26 +0000 Fri, 14 Jul 2017 04:31:26 +0000 0 2 <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="https://review.whamcloud.com/27735" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/27735</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-9687" title="kernel update [RHEL6.9 2.6.32-696.3.2.el6]" class="issue-link" data-issue-key="LU-9687"><del>LU-9687</del></a> kernel: kernel update RHEL6.9 <span class="error">&#91;2.6.32-696.3.2.el6&#93;</span><br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: ee1a77dd6ef131c643006d71f748bc81000bb798</p> <p>el6 support of lustre on master is currently broken, as reported in <a href="https://jira.whamcloud.com/browse/LU-20" title="patchless server kernel" class="issue-link" data-issue-key="LU-20"><del>LU-20</del></a><br/> This mod will never give +test for results using ldiskfs on el6.9 without a solution to that problem or reverting the offending mod.</p> <p>This ticket is now obsolete. Replaced by <a href="https://jira.whamcloud.com/browse/LU-9763" title="kernel update [RHEL6.9 2.6.32-696.6.3.el6]" class="issue-link" data-issue-key="LU-9763"><del>LU-9763</del></a>.</p> Related LU-9572 LU-9763 Development Rank 1|hzzfdr: Rank (Obsolete) 9223372036854775807 Severity