Security Bulletin: Multiple Vulnerabilities in the Linux kernel affect the IBM FlashSystem models 840 and 900

There are vulnerabilities in the Linux kernel to which the IBM FlashSystem 840 and FlashSystem 900 are susceptible (CVE-2019-11477, CVE-2019-11478, and CVE-2019-11479). An exploit of these vulnerabilities could allow a remote attacker to cause a denial of service condition.

Affected product(s) and affected version(s):

Storage Node machine type and models (MTMs) affected:

• 9846-AE1 and 9848-AE1
• 9846-AE2 and 9848-AE2
• 9846-AE3 and 9848-AE3

Supported storage node code versions which are affected

• VRMFs prior to 1.5.2.6
• VRMFs prior to 1.6.1.1

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/1137802

The post Security Bulletin: Multiple Vulnerabilities in the Linux kernel affect the IBM FlashSystem models 840 and 900 appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2syfWl3