Users should update to kernel 3.10.0-614.10.2.lve1.4.50

May 24, 2017 23:07 GMT  ·  By

CloudLinux's Mykola Naugolnyi has announced today the availability of a new stable kernel update for users of the CloudLinux 7 and CloudLinux 6 Hybrid operating systems, addressing multiple security issues and bugs.

This new CloudLinux 7 stable kernel comes less than 24 hours after the release of the Beta kernel with the same version number, specifically 3.10.0-614.10.2.lve1.4.50, which replaces kernel-3.10.0-427.36.1.lve1.4.47 and is available for download as we speak from the production repository of CloudLinux 7 operating system series.

As you already know from our report on the Beta kernel release, this updated kernel version improves the fix for the CVE-2017-7895 security issue, but it also looks like it patches a multitude of things, including a deadlock with HPC backup solutions, MegaRAID driver panic issues, and kernel panic that occurred on netlink_lookup.

Additionally, it improves symlink attack protection by making sure that nested symlinks are always checked, addresses crashes around rhashtable, which occurred during the rebase on OpevVZ rh7-3.10.0-514.10.2.vz7.29.2 kernel from the upstream Red Hat Enterprise Linux 7 operating system series.

Users urged to update their systems as soon as possible

Other than that, the new kernel update fixes a panic that occurred while waiting for LVE to be initialized, prevents the kernel from running out of container IDs, patches another crash that occurred when setting vm.vfs_cache_min_ratio to zero in runtime, and reduces the high-order allocation impact in the file system mount code.

A NULL pointer dereferencing was fixed as well in the task scheduler, and you should update your CloudLinux 7 or CloudLinux 6 Hybrid installations as soon as possible. To update to kernel 3.10.0-614.10.2.lve1.4.50, simply open a terminal emulator or switch to the virtual console and run the following command. Reboot your system once the kernel was successfully installed.

For CloudLinux 7:
yum clean all --enablerepo=* && yum install kernel-3.10.0-614.10.2.lve1.4.50.el7 kmod-lve-1.4-50.el7
For CloudLinux 6 Hybrid:
yum clean all --enablerepo=* && yum install kernel-3.10.0-614.10.2.lve1.4.50.el6h kmod-lve-1.4-50.el6h