Article ID: 119965, created on Feb 3, 2014, last review on May 27, 2014

  • Applies to:
  • Virtuozzo containers for Linux 4.7
-----------------------------------------------------------------------
Synopsis:          A new Parallels Virtuozzo Containers 4.7 kernel update
                   addressing security and stability issues.
Product:           Parallels Virtuozzo Containers 4.7
Keywords:          'bugfix' 'stability' 'security'

-----------------------------------------------------------------------

This document provides information on the new Parallels Virtuozzo Containers 4.7
kernel, version 2.6.32-042stab084.20.

--------------------------------------------------------------------------------
CONTENTS

1. About This Update
2. Update Description
3. Obtaining the New Kernel

--------------------------------------------------------------------------------

1. ABOUT THIS UPDATE

The current update for the Parallels Virtuozzo Containers 4.7 kernel provides a
new kernel based on the Red Hat Enterprise Linux 6.4 kernel
(2.6.32-358.23.2.el6). The updated kernel includes a number of security and
stability fixes.

--------------------------------------------------------------------------------

2. UPDATE DESCRIPTION

This update includes the following fixes and improvements:

* Kernel crashes due to intensive use of conntracks inside a Container. Kernel
  memory corruption caused by races in conntrack initialization and incorrect
  freeing, which is triggered by a very specific load from inside Containers
  with conntracks enabled. (PCLIN-32278, PCLIN-31920, PCLIN-32220, OVZ# 2851)

* Fusion-io's ioMemory Virtual Storage Layer driver kernel module (iomemory-vsl)
  failed to compile due to hardcoded size of kernel struct file_operations.
  (PCLIN-32299)

* A race condition on relocation of blocks in ploop code could lead to a kernel
  panic. (PSBM-23905)

--------------------------------------------------------------------------------

3. OBTAINING THE NEW KERNEL

You can download and install this kernel update using the vzup2date utility
included in the Parallels Virtuozzo Containers 4.7 distribution set.

--------------------------------------------------------------------------------
Copyright (c) 1999-2014 Parallels IP Holdings GmbH and its affiliates. All
rights reserved.

Search Words

PCLIN-31920

2.6.32-358.23.2.el6

PCLIN-32220

PSBM-23905

iomemory-vsl

nf_conntrack

PCLIN-32278

OVZ# 2851

PCLIN-32299

2.6.32-042stab084.20

0c05f0c76fec3dd785e9feafce1099a9 2897d76d56d2010f4e3a28f864d69223 d02f9caf3e11b191a38179103495106f e8e50b42231236b82df27684e7ec0beb

Email subscription for changes to this article
Save as PDF