RHSA-2015:0694: Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages contain the Linux kernel, the core of any Linuxoperating system. A flaw was found in the way the Linux kernel's XFS file system handled replacing of remote attributes under certain conditions. A local user withaccess to XFS file system mount could potentially use this flaw to escalatetheir privileges on the system. (CVE-2015-0274, Important) A flaw was found in the way the Linux kernel's splice() system call validated its parameters. On certain file systems, a local, unprivilegeduser could use this flaw to write past the maximum file size, and thuscrash the system. (CVE-2014-7822, Moderate) A race condition flaw was found in the Linux kernel's ext4 file system implementation that allowed a local, unprivileged user to crash the systemby simultaneously writing to a file and toggling the ODIRECT flag usingfcntl(FSETFL) on that file. (CVE-2014-8086, Moderate) It was found that due to excessive fileslock locking, a soft lockup could be triggered in the Linux kernel when performing asynchronous I/Ooperations. A local, unprivileged user could use this flaw to crash thesystem. (CVE-2014-8172, Moderate) A NULL pointer dereference flaw was found in the way the Linux kernel's madvise MADVWILLNEED functionality handled page table locking. A local,unprivileged user could use this flaw to crash the system. (CVE-2014-8173,Moderate)Red Hat would like to thank Eric Windisch of the Docker project forreporting CVE-2015-0274, and Akira Fujita of NEC for reportingCVE-2014-7822.Bug fixes: A patch removing the xtconnlimit revision zero ABI was not reverted in the kernel-rt package, which caused problems because the iptables packagerequires this revision. A patch to remove the xtconnlimit revision 0 wasreverted from the kernel-rt sources to allow the iptables command toexecute correctly. (BZ#1169755) With an older Mellanox Connect-IB (mlx4) driver present in the MRG Realtime kernel, a race condition could occur that would cause a loss ofconnection. The mlx4 driver was updated, resolving the race condition andallowing proper connectivity. (BZ#1182246) The MRG Realtime kernel did not contain the appropriate code to resume after a device failed, causing the volume status after a repair to not beproperly updated. A "refresh needed" was still listed in the "lvs" outputafter executing the "lvchange --refresh" command. A patch was added thatadds the ability to correctly restore a transiently failed device uponresume. (BZ#1159803) The sosreport executable would hang when reading /proc/net/rpc/use-gss-proxy because of faulty waitqueue logic in the prochandler. This waitqueue logic was removed from the proc handler, allowingthe reads to correctly return the current state. (BZ#1169900)Enhancements: The MRG Realtime kernel-rt sources have been modified to take advantage of the updated 3.10 kernel sources that are available with the Red HatEnterprise Linux 7 releases. (BZ#1172844) The MRG Realtime version of the e1000e driver has been updated to provide support for the Intel I218-LM network adapter. (BZ#1191767) The MRG Realtime kernel was updated to provide support for the Mellanox Connect-IB (mlx5). (BZ#1171363) The rt-firmware package has been updated to provide additional firmware files required by the new version of the Red Hat Enterprise MRG 2.5 kernel(BZ#1184251)All kernel-rt users are advised to upgrade to these updated packages, whichcontain backported patches to correct these issues and add theseenhancements. The system must be rebooted for this update to take effect.