We got sorted on this one - old faithful did the trick - REBOOT

To prove the concept, we rebooted the passive node, ran the service pack from the active node again and it patched the passive node successfuly but then failed on the active. A quick reboot of the active and rerun of the service pack and we were sorted.

dunno why though