[gpfsug-discuss] kernel 3.10.0-1160.36.2.el7.x86_64 (CVE-2021-33909) not compatible with DB2 (for TSM, HPSS, possibly other IBM apps)

[Jonathan Buzzard]

On 30/07/2021 05:16, Jaime Pinto wrote:
> 
> Alert related to sysadmins managing TSM/DB2 servers and those 
> responsible for applying security patches, in particular kernel 
> 3.10.0-1160.36.2.el7.x86_64, despite security concerns raised by 
> CVE-2021-33909:
> 
> Please hold off on upgrading your RedHat systems (possibly centos too). 
> I just found out the hard way that kernel 3.10.0-1160.36.2.el7.x86_64 is 
> not compatible with DB2, and after the node reboot DB2 would not work 
> anymore, not only on TSM, but neither on HPSS. I had to revert the 
> kernel to 3.10.0-1062.18.1.el7.x86_64 to get DB2 working properly again.
> 

For the record I have been running Spectrum Protect Extended Edition 
8.1.12 on 3.10.0-1160.31.1 (genuine RHEL 7.9) since the 11th of June 
this year.

I would say therefore there is no need to roll back quite so far as 
3.10.0-1062.18.1 which is quite ancient now.

Can't test anything newer as I am literally in the middle of migrating 
our TSM server to new hardware and a RHEL 8.4 install. Spent yesterday 
in the data centre re-cabling the disk arrays to the new server; neat, 
tidy and labelled this time :-)


JAB.

-- 
Jonathan A. Buzzard                         Tel: +44141-5483420
HPC System Administrator, ARCHIE-WeSt.
University of Strathclyde, John Anderson Building, Glasgow. G4 0NG