(RHSA-2012:1064) Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issues:

• A NULL pointer dereference flaw was found in the nf_ct_frag6_reasm()
  function in the Linux kernel’s netfilter IPv6 connection tracking
  implementation. A remote attacker could use this flaw to send
  specially-crafted packets to a target system that is using IPv6 and also
  has the nf_conntrack_ipv6 kernel module loaded, causing it to crash.
  (CVE-2012-2744, Important)

• A flaw was found in the way the Linux kernel’s key management facility
  handled replacement session keyrings on process forks. A local,
  unprivileged user could use this flaw to cause a denial of service.
  (CVE-2012-2745, Moderate)

Red Hat would like to thank an anonymous contributor working with the
Beyond Security SecuriTeam Secure Disclosure program for reporting
CVE-2012-2744.

This update also fixes the following bugs:

• Previously introduced firmware files required for new Realtek chipsets
  contained an invalid prefix (“rtl_nic_”) in the file names, for example
  “/lib/firmware/rtl_nic/rtl_nic_rtl8168d-1.fw”. This update corrects these
  file names. For example, the aforementioned file is now correctly named
  “/lib/firmware/rtl_nic/rtl8168d-1.fw”. (BZ#832359)

• This update blacklists the ADMA428M revision of the 2GB ATA Flash Disk
  device. This is due to data corruption occurring on the said device when
  the Ultra-DMA 66 transfer mode is used. When the
  “libata.force=5:pio0,6:pio0” kernel parameter is set, the aforementioned
  device works as expected. (BZ#832363)

• On Red Hat Enterprise Linux 6, mounting an NFS export from a Windows 2012
  server failed due to the fact that the Windows server contains support for
  the minor version 1 (v4.1) of the NFS version 4 protocol only, along with
  support for versions 2 and 3. The lack of the minor version 0 (v4.0)
  support caused Red Hat Enterprise Linux 6 clients to fail instead of
  rolling back to version 3 as expected. This update fixes this bug and
  mounting an NFS export works as expected. (BZ#832365)

• On ext4 file systems, when fallocate() failed to allocate blocks due to
  the ENOSPC condition (no space left on device) for a file larger than 4 GB,
  the size of the file became corrupted and, consequently, caused file system
  corruption. This was due to a missing cast operator in the
  “ext4_fallocate()” function. With this update, the underlying source code
  has been modified to address this issue, and file system corruption no
  longer occurs. (BZ#833034)

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.