Jonathan, CVE-2021-33909 and 3.10.0-1160.36.2.el7.x86_64 was published on July 20, 2021. GPFS has not been tested on this RHEL kernel yet per our FAQ https://www.ibm.com/docs/en/spectrum-scale/5.1.1?topic=spectrum-scale-faq. For both IBM Spectrum Scale 5.1.1.2 and IBM Spectrum Scale 5.0.5.8, The latest tested RHEL kernel is 3.10.0-1160.31.1.el7 (RHEL 7.9) tile now. 3.10.0-1160.36.2.el7.x86_64 is a kernel errata of 3.10.0-1160. According to IBM Spectrum Scale FAQ, it's a supported kernel version (IBM will update kernel support list if incompatibility issues were found in subsequent tests) https://www.ibm.com/docs/en/spectrum-scale/5.1.1?topic=spectrum-scale-faq. Kernel errata can be applied to the current kernel version unless they are explicitly listed in the FAQ as not supported. Always validate kernel changes including errata with IBM Spectrum Scale in a test environment before rolling out to production. Always rebuild the portability layer after any kernel changes. See also https://www.ibm.com/support/pages/full-story-ibm-spectrum-scale-and-linux-version-compatibility Regards, The Spectrum Scale (GPFS) team ------------------------------------------------------------------------------------------------------------------ If you feel that your question can benefit other users of Spectrum Scale (GPFS), then please post it to the public IBM developerWroks Forum at https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479 . If your query concerns a potential software error in Spectrum Scale (GPFS) and you have an IBM software maintenance contract please contact 1-800-237-5511 in the United States or your local IBM Service Center in other countries. The forum is informally monitored as time permits and should not be used for priority messages to the Spectrum Scale (GPFS) team. From: Jonathan Buzzard <jonathan.buzzard at strath.ac.uk> To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org> Date: 2021/07/23 08:51 PM Subject: [EXTERNAL] [gpfsug-discuss] CVE-2021-33909 and 3.10.0-1160.36.2.el7.x86_64 Sent by: gpfsug-discuss-bounces at spectrumscale.org Anyone know what GPFS versions will work with kernel version 3.10.0-1160.36.2 on RHEL7 rebuilds to patch for the above local privilege escalation bug? JAB. -- Jonathan A. Buzzard Tel: +44141-5483420 HPC System Administrator, ARCHIE-WeSt. University of Strathclyde, John Anderson Building, Glasgow. G4 0NG _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20210724/b6ac3141/attachment.html>