CVE-2019-20431

In the Lustre file system before 2.12.3, the ptlrpc module has an osdmapremotetolocal out-of-bounds access and panic due to the lack of validation for specific fields of packets sent by a client. osdbufsget in the osdldiskfs module does not validate a certain length value...

CVE-2019-20431

CVE-2019-20431 affects the Lustre file system prior to version 2.12.3, where the ptlrpc module permits an osd_map_remote_to_local out-of-bounds access and panics due to lack of validation of certain packet fields from a client. The osd_bufs_get function in the osd_ldiskfs module also lacks valida...