Bugzilla – Bug 1084058
VUL-0: CVE-2017-18216: kernel: In fs/ocfs2/cluster/nodemanager.c local users can cause a denial of service (NULL pointer dereference and BUG)
Last modified: 2020-11-10 21:22:27 UTC
CVE-2017-18216 In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-18216 https://github.com/torvalds/linux/commit/853bc26a7ea39e354b9f8889ae7ad1492ffa28d2 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=853bc26a7ea39e354b9f8889ae7ad1492ffa28d2
(In reply to Karol Babioch from comment #0) > CVE-2017-18216 > > In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local > users nodemanager code is only needed when using o2cb as plugin for ocfs2. However, SUSE only supports fsdlm plugin with ocfs2 for our users, so I think there is no concern for us. Jan, Gang is the right person for ocfs2 issue :) So add hime in the CC list. Eric > can cause a denial of service (NULL pointer dereference and BUG) because a > required mutex is not used. > > References: > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-18216 > https://github.com/torvalds/linux/commit/ > 853bc26a7ea39e354b9f8889ae7ad1492ffa28d2 > http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/ > ?id=853bc26a7ea39e354b9f8889ae7ad1492ffa28d2
OK, thanks for pointer to Gang :). Is the comment about o2cb not being supported valid even for older products like SLE11 SP4? I have some vague memories it has been supported at one point but I'm not sure if this was in SLE11-times or even before :) Or the problem is not present in such old codebase? Gang?
(In reply to Jan Kara from comment #5) > OK, thanks for pointer to Gang :). Is the comment about o2cb not being > supported valid even for older products like SLE11 SP4? I have some vague > memories it has been supported at one point but I'm not sure if this was in > SLE11-times or even before :) Or the problem is not present in such old > codebase? Gang? Hello Jan, Our product (HA extension) does not provide support to O2CB stack based OCFS2 file system configuration on SLE11/SLE12 (even SLE15) releases, for more older SLE release (SLE10?), I do not know. Of source, the related kernel source (for O2CB kernel modules) is still in our SLE kernel source on SLE11/SLE12/SLE15, the user still can setup O2CB stack based OCFS2 file system cluster with our SLE releases, we do not provide any support in this case. Thanks Gang
This won't be fixed.