- Kernel Update Version:
- Release Date:
- 2022-03-02 08:28:02
ploop: potential corruption of the index during discard operation.A race condition was discovered in ploop, which could lead to corruption of the index during discard operations in certain cases. Note. It is not recommended to manually unload the ReadyKernel patch with the fix for this issue while any discard operations for ploop images are in progress: the ploop images could be corrupted as a result. Upgrading the patch is OK, only manual unloads and downgrades can be problematic.
ploop: warn if a discard request is issued for the ploop header.
ve: detect removal of additional system libraries in the containers to simplify debugging.
Potential leak of a reference counter for a memory cgroup in memcg_expand_shrinker_maps().
Potential corruption of ploop images due to a race between the truncation thread and resize operations.
ve: make it easier to analyze removal of system libraries in the containers.
xfs: potential denial of service caused by missing unlock operation in xfs_setattr_nonsize().It was discovered that xfs_setattr_nonsize() would not unlock 'ILOCK' lock if the user or group were out of their disk quota. As a result, any subsequent operation, which needed to take 'ILOCK', would get stuck, leading to a denial of service.https://access.redhat.com/security/cve/cve-2019-15538
nf_tables: kernel crash in nft_rbtree_lookup().
ploop: holes in raw ploop images were handled incorrectly.
Kernel crash due to out-of-bounds memory accesses in process_vm_readv().It was discovered that the implementation of process_vm_readv() system call could try to access memory outside of the structures it was processing in certain cases. A local unprivileged user could use this vulnerability to crash the system.
quotaoff operation executed in a container could get stuck in D state.
Certain operations with an empty ploop image could lead to its unexpected growth.
Incomplete fix for PSBM-100575: reading of /proc/bc/resources line by line would never end.
memcg: memory corruption caused by writing beyond the end of shrinker_map structure.
ixgbe: lots of warnings in the system log due to incorrect check for firmware errors.
ploop: kernel crashes when processing discard requests for ploop images in raw format.
scsi: printing lots of messages about rejected I/O causes a hard lockup and a kernel crash.
Kernel crash in shrink_slab() when trying to mount an image with a broken ext4 file system.
Reading of /proc/bc/resources line by line would never end: no end of file was reported.
Potential kernel crash in __radix_tree_insert() when fscache is used for NFS mounts.
sunrpc: potential kernel crash in bc_svc_process().
A bug in ploop prevented recovery of corrupted ploop images.
The minimum amount of reserved free memory (vm.min_free_kbytes) was set too high by default.
kvm: potential system hang due to an error in mmu_shrink_scan().
Processes could get stuck in copy_net_ns() forever.