Kernel security update: Virtuozzo ReadyKernel patch 15.0 for kernels 3.10.0-327.18.2.vz7.15.2 (Virtuozzo 7.0.0), 3.10.0-327.36.1.vz7.18.7 (Virtuozzo 7.0.1), and 3.10.0-327.36.1.vz7.20.18 (Virtuozzo 7.0.3) \

Issue date: 2017-03-20

Applies to: Virtuozzo 7.0

Virtuozzo Advisory ID: VZA-2017-021

1. Overview

The cumulative Virtuozzo ReadyKernel patch updated with a security fix. The patch applies to Virtuozzo versions 7.0.0, 7.0.1, and 7.0.3.

2. Security Fixes

• [Moderate] A flaw was discovered in the Linux kernel’s key subsystem. Invoking the request_key() system call with a specially crafted set of arguments could result in a NULL-pointer dereference inside the search_keyring() function. A local unprivileged user could use this vulnerability to crash the system. The vulnerability could be exploited from inside containers. (CVE-2017-2647)

3. Installing the Update

Download, install, and instantly apply the patch to the current kernel by running ‘readykernel update’.

4. References

• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-15.2-15.0-1.vl7/
• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-18.7-15.0-1.vl7/
• https://readykernel.com/patch/Virtuozzo-7/readykernel-patch-20.18-15.0-1.vl7/
• https://bugzilla.redhat.com/show_bug.cgi?id=1427994

The JSON file with the list of new and updated packages is available at JSON file.