[Ksplice][Fedora-16-updates] New updates available via Ksplice (FEDORA-2012-14329)

[Phil Turnbull]

Synopsis: FEDORA-2012-14329 can now be patched using Ksplice

Systems running Fedora 16 can now use Ksplice to patch against the
latest Fedora kernel update, FEDORA-2012-14329.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack on Fedora 16 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* Race-condition in VFS file operations.

A race condition when performing scatter-gather IO on a file can lead
to data corruption.


* Kernel panic in hugetlbfs.

A race condition between processes sharing huge page mappings can cause
a kernel panic.


* NULL pointer dereference in TCM driver.

Under low-memory conditions the TCM driver can attempt to free a NULL
page leading to a kernel crash.


* Use-after-free in Parallel NFS.

A use-after-free condition can be triggered when canceling an operation
against a Parallel-NFS mount causing a kernel crash.


* Kernel panic in Parallel NFS.

A kernel panic (BUG_ON) can be triggered when releasing file data 
because of a broken assumption in the Parallel NFS implementation.


* NULL pointer dereference in Bluetooth HCI.
A failed name lookup when handling a Bluetooth HCI event can cause a 
NULL pointer dereference.


* Use-after-free in audit subsystem.

A reference counting error in the audit subsystem can trigger a
use-after-free causing a kernel crash.


* NULL pointer dereference in vmwgfx driver.

A NULL pointer dereference can be triggered in the VMware graphics
driver.


* Use-after-free in Radeon graphics driver.

A use-after-free condition can be triggered when failing to initialize
a graphics buffer object.


* Kernel panic in SUNRPC over TCP.

A kernel panic can be triggered when closing a SUNRPC TCP socket.


* Race condition in SUNRPC.

A race condition can cause data corruption when closing a SUNRPC socket.


* NULL pointer dereference in USB ACM.

A NULL pointer dereference can be triggered when probing a device that
provides an ACM endpoint.


* NUMA memory policy kernel panic.

A kernel panic can be triggered when querying a task's NUMA memory 
policy via procfs.


* SCSI MegaRAID kernel panic.

A kernel panic can be triggered when the MegaRAID driver is loaded but
no adapters are present on the system.


* NULL pointer dereference in DCCP sockets.

A NULL pointer dereference can be triggered by querying or setting the
socket options of a DCCP socket that has no associated CCID.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.