[Ksplice-Fedora-20-updates] New updates available via Ksplice (FEDORA-2014-9351)

[Oracle Ksplice]

Synopsis: FEDORA-2014-9351 can now be patched using Ksplice

Systems running Fedora 20 can now use Ksplice to patch against the
latest Fedora kernel update, FEDORA-2014-9351.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack on Fedora 20 install
these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* Incorrect SELinux label in cryptographic sockets.

The kernel does not correctly apply an SELinux label to cryptographic
control sockets. This can allow local users to bypass SELinux policies.


* Memory corruption in RapidIO TSI721 PCI Express controller.

The RapidIO TSI721 PCI Express controller does not correctly validate
transfer descriptors leading to kernel memory corruption.


* Denial of service in kernel page writeback.

Under high memory pressure, a divide-by-zero and kernel panic can be
triggered when the kernel attempts to write dirty pages back to disk.


* Use after free in memory control group OOM notifier.

Incorrect locking in the memory control group out-of-memory notifier can
trigger a use-after-free condition and kernel panic.


* Memory leak in kernel red-black tree implementation.

The kernel red-black tree data structure does not correctly free memory
when a red-black tree is destroyed leading to a kernel memory leak and
subsequent kernel panic.


* NULL pointer dereference in 802.11 event tracing.

A missing NULL pointer check could result in a NULL pointer dereference
when tracing the 802.11 wireless subsystem.


* Deadlock in clockevent delta modification.

Circular locking when printing a kernel log message during the
modification of a clockevent timer could result in deadlock and a kernel
hang.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.