Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In the Lustre file system before 2.12.3, the ptlrpc module has an out-of-bounds read and panic due to the lack of validation for specific fields of packets sent by a client. The ldl_request_cancel function mishandles a large lock_count parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lustre ptlrpc模块缓冲区错误漏洞
Vulnerability Description
Lustre是Lustre社区的一款为大规模计算系统提供一个全局一致的与POSIX兼容的分布式并行文件系统。 Lustre 2.12.3之前版本的ptlrpc模块中存在缓冲区错误漏洞，该漏洞源于‘ldl_request_cancel’函数没有正确处理较大的‘lock_count’参数。远程攻击者可利用该漏洞导致系统崩溃。
CVSS Information
N/A
Vulnerability Type
N/A