[Ksplice-Fedora-26-updates] New Ksplice updates for Fedora 26 (FEDORA-2017-5a05bdbc0d)

[Oracle Ksplice]

Synopsis: FEDORA-2017-5a05bdbc0d can now be patched using Ksplice

Systems running Fedora 26 can now use Ksplice to patch against the
latest Fedora kernel update, FEDORA-2017-5a05bdbc0d.

INSTALLING THE UPDATES

We recommend that all users of Ksplice Uptrack running Fedora 26
install these updates.

On systems that have "autoinstall = yes" in /etc/uptrack/uptrack.conf,
these updates will be installed automatically and you do not need to
take any action.

Alternatively, you can install these updates by running:

# /usr/sbin/uptrack-upgrade -y


DESCRIPTION

* Denial-of-service when setting network interface alias.

A missing check on user input could lead to use of uninitialized memory
when setting network interface alias. A local attacker could use this
flaw to cause a denial-of-service.


* Denial-of-service when adding a mac80211 network interface.

A logic error in error path when adding a mac80211 network interface
could lead to a memory leak. A local attacker could use this flaw to
exhaust kernel memory and cause a denial-of-service.


* Information leak when dumping RTNetlink interface information.

A missing structure initialization when dumping RTNetlink interface
information could leak on-stack kernel data. A local attacker
could use this flaw to gain information about running kernel and
facilitate an attack.


* Denial-of-service when deleting a bond device registered in a route.

A logic error in IPV6 route state machine could hang the kernel if a
bond device is deleted while registered in a route. A local attacker
could use this flaw to cause a denial-of-service.


* Denial-of-service when dumping diagnostic information of SCTP socket.

A locking error when dumping diagnostic information of SCTP socket could
lead to a dead lock. A local attacker could use this flaw to cause a
denial-of-service.


* Denial-of-service when using Communication CPU to Application CPU Interfaces.

An error in allocation flag when using CAIF sockets could lead to a
deadlock. A local attacker could use this flaw to cause a
denial-of-service.


* Denial-of-service when receiving packets on Transparent Inter Process Communication sockets.

An error in allocation flag when receiving packets on TIPC sockets could
lead to a dead lock.  A local attacker could use this flaw to cause a
denial-of-service.


* Use-after-free when releasing IGMP socket.

A locking error when releasing IGMP socket could lead to a
use-after-free. A local attacker could us this flaw to cause a
denial-of-service.


* Denial-of-service when creating MLX5E network device.

A missing check in error path when creating MLX5E network device could
lead to an invalid memory access. A local attacker could use this flaw
to cause a denial-of-service.


* Denial-of-service when registering vlan device.

A missing check in error path when registering vlan device could lead to
a kernel BUG. A local attacker could use this flaw to cause a
denial-of-service.


* Denial-of-service when using IPV6 routing policy.

A logic error when using IPV6 routing policy could lead to a memory
leak. A local attacker could use this flaw to exhaust kernel memory and
cause a denial-of-service.


* Denial-of-service when creating connection tracking entry.

A missing initialization when creating a connection tracking entry using
Synproxy socket could lead to kernel crashes. A local attacker could use
this flaw to cause a denial-of-service.


* Denial-of-service when setting up NFSv4 services.

A logic error when setting up NFSv4 services could lead to a divide
error. A local attacker could use this flaw to cause a
denial-of-service.


* Denial-of-service when configuring codec for an ALSA device.

A list handling error when going through ALSA supported codecs could
lead to an infinite loop. A local attacker could use this flaw to cause
a denial-of-service.


* Permission bypass when setting default attributes on NFSv4.

A logic error when creating a file in exclusive mode on an NFSv4
filesystem causes the set-group-ID bit to be discarded, bypassing
intended permissions.


* Denial of service when mounting Intel Resource Directory Technology.

A missing free in error path when mounting resctrl filesystem on Intel
Resource Directory Technology could lead to a memory leak. A local
attacker could use this flaw to exhaust kernel memory.


* Denial-of-service when destroying context command in DRM driver for VMware Virtual GPU.

A missing free when destroying context's command in DRM driver for
VMware Virtual GPU could lead to a memory leak. A local attacker could
use this flaw to exhaust kernel memory and cause a denial-of-service.


* Denial-of-service when releasing xen block backend driver.

An early free when releasing xen block backend driver could lead to a
use-after-free. A local attacker could use this flaw to cause a
denial-of-service.


* Denial-of-services when using XFRM to transform network packets.

Multiple errors in XFRM framework could lead to multiple NULL pointer
dereferences or out-of-bound accesses. A local attacker could use this
flaw to cause a denial-of-service.


* Denial-of-service while copying large file on OCFS2 filesystem.

A locking error while copying large file on OCFS2 filesystem while
changing file attributes could lead to a dead lock. A local attacker
could use this flaw to cause a denial-of-service.

SUPPORT

Ksplice support is available at ksplice-support_ww at oracle.com.