CVE-2019-20423

CVE-2019-20423 affects the Lustre file system prior to 2.12.3, where the ptlrpc module can overflow the buffer and panic due to lacking validation of certain fields in client packets. The root cause is an integer signedness error in target_handle_connect() that mishandles a specific size value wh...