RHSA-2010:0521: Moderate: gfs-kmod security update
The gfs-kmod packages contain modules that provide the ability to mount anduse GFS file systems.A flaw was found in the gfslock() implementation. The GFS locking codecould skip the lock operation for files that have the SISGID bit(set-group-ID on execution) in their mode set. A local, unprivileged useron a system that has a GFS file system mounted could use this flaw to causea kernel panic. (CVE-2010-0727)These updated gfs-kmod packages are in sync with the latest kernel(2.6.18-164.19.1.el5). The modules in earlier gfs-kmod packages failed toload because they did not match the running kernel. It was possible toforce-load the modules. With this update, however, users no longer need to.Users are advised to upgrade to these latest gfs-kmod packages, updated foruse with the 2.6.18-164.19.1.el5 kernel, which contain a backported patchto correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2010:0521?
The severity of RHSA-2010:0521 is classified as moderate.
How do I fix RHSA-2010:0521?
To fix RHSA-2010:0521, you should update the gfs-kmod package to version that includes the fix.
What systems are affected by RHSA-2010:0521?
RHSA-2010:0521 affects the gfs-kmod packages on systems running kernel version 2.6.18-164.19.1.el5.
What is the vulnerability in RHSA-2010:0521?
The vulnerability in RHSA-2010:0521 relates to a flaw in the gfs_lock() implementation, potentially allowing lock operations to be skipped.
Is there a workaround for RHSA-2010:0521?
There is no documented workaround for RHSA-2010:0521; the recommended action is to update the affected packages.