[Ksplice][Virtuozzo 4 Updates] New updates available via Ksplice (2.6.18-371.9.1.el5.028stab114.2)

[Phil Turnbull]

Synopsis: 2.6.18-371.9.1.el5.028stab114.2 can now be patched using Ksplice
CVEs: CVE-2013-7339 CVE-2014-1737 CVE-2014-1738

Systems running Virtuozzo 4 or the OpenVZ RHEL 5 kernel can now use
Ksplice to patch against the latest Parallels Virtuozzo Containers
kernel security update, 2.6.18-371.9.1.el5.028stab114.2.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack on Virtuozzo 4 or
OpenVZ on RHEL 5 install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* CVE-2014-1737, CVE-2014-1738: Local privilege escalation in floppy ioctl.

The floppy driver would leak internal memory addresses to userspace,
and would allow unprivileged userspace code to overwrite those
addresses, allowing for a local privilege escalation and gaining
of root.


* CVE-2013-7339: NULL pointer dereference in RDS socket binding.

A missing pointer validation can trigger a NULL pointer dereference and kernel
panic when binding an RDS socket.


* Kernel BUG when writing asynchronously to block device.

Due to an incomplete backport of an upstream patch, using asyncronous I/O
to write to a block device would cause a pointer to a file offset to be
passed instead of the offset itself. This could in certain circumstances
lead to an assertion failure and subsequent kernel crash; a malicious
local user could potentially use this to cause denial of service.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.