[Ksplice][Fedora-17-updates] New updates available via Ksplice (FEDORA-2012-17775)

[Sasha Levin]

Synopsis: FEDORA-2012-17775 can now be patched using Ksplice

Systems running Fedora 17 can now use Ksplice to patch against the
latest Fedora kernel update, FEDORA-2012-17775.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack on Fedora 17 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* ext4 filesystem corruption with journal_async_commit mount option.

Mounting an ext4 filesystem with the journal_async_commit mount option
enables journal checksumming and under certain circumstances this can
lead to data corruption.


* Use-after-free in the block device control group subsystem.

A use-after-free in the block device control group could result in a
system hang under certain conditions.


* Use-after-free in Ceph distributed filesystem messenger.

Incorrect reference counting in the Ceph messenger could result in a
use-after-free condition and kernel crash.


* NULL pointer dereference in Ceph distributed filesystem messenger.

A missing NULL pointer check could result in a NULL pointer dereference
and kernel crash.


* Kernel crash on unmount of Ceph filesystem.

Missing reference count manipulations could result in a kernel BUG() on
unmounting a Ceph filesystem.


* NULL pointer dereference in Ceph Metadata Server client.

Invalid range checking could result in a NULL pointer dereference and
kernel crash.


* Kernel crash in Ceph distributed filesystem core.

Incorrect range checking in the Ceph core could result in a
divide-by-zero and kernel crash.


* Memory leak in Infinity USB Unlimited Phoenix serial port driver.

Missing memory free operations could result in a memory leak and
denial-of-service in the Infinity USB Unlimited Phoenix driver.


* Use-after-free in target core TMR failure handling.

A double free for a command structure when handling a TMR failure could
result in a use-after-free condition and a kernel crash.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.