kernel-3.10.0-229.14.1.el7

The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

Security issues fixed with this release:

CVE-2014-9585
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel
through 3.18.2 does not properly choose memory locations for the vDSO
area, which makes it easier for local users to bypass the ASLR
protection mechanism by guessing a location at the end of a PMD.
CVE-2015-0275
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.
CVE-2015-1333
Memory leak in the __key_link_end function in security/keys/keyring.c
in the Linux kernel before 4.1.4 allows local users to cause a denial
of service (memory consumption) via many add_key system calls that
refer to existing keys.
CVE-2015-3212
Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2
allows local users to cause a denial of service (list corruption and
panic) via a rapid series of system calls related to sockets, as
demonstrated by setsockopt calls.
CVE-2015-4700
The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the
Linux kernel before 4.0.6 allows local users to cause a denial of
service (system crash) by creating a packet filter and then loading
crafted BPF instructions that trigger late convergence by the JIT
compiler.
CVE-2015-5364
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux
kernel before 4.0.6 do not properly consider yielding a processor,
which allows remote attackers to cause a denial of service (system
hang) via incorrect checksums within a UDP packet flood.
CVE-2015-5366
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux
kernel before 4.0.6 provide inappropriate -EAGAIN return values, which
allows remote attackers to cause a denial of service (EPOLLET epoll
application read outage) via an incorrect checksum in a UDP packet, a
different vulnerability than CVE-2015-5364.

Fixed bugs: