CVE-2019-20428

In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldlrequestcancel function mishandles a large lockcount parameter...

PT-2020-10441

Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue is related to the ptlrpc module in the Lustre file system, where a lack of validation for specific fields of packets sent by a client can cause an out-of-bounds read and panic...