kernel-3.10.0-327.28.2.el7

The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

Security issues fixed with this release:

CVE-2015-8660
The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel
through 4.3.3 attempts to merge distinct setattr operations, which
allows local users to bypass intended access restrictions and modify
the attributes of arbitrary overlay files via a crafted application.
CVE-2016-2143
The fork implementation in the Linux kernel before 4.5 on s390
platforms mishandles the case of four page-table levels, which allows
local users to cause a denial of service (system crash) or possibly
have unspecified other impact via a crafted application, related to
arch/s390/include/asm/mmu_context.h and
arch/s390/include/asm/pgalloc.h.
CVE-2016-4470
The key_reject_and_link function in security/keys/key.c in the Linux
kernel through 4.6.3 does not ensure that a certain data structure is
initialized, which allows local users to cause a denial of service
(system crash) via vectors involving a crafted keyctl request2
command.

Fixed bugs:

* The glibc headers and the Linux headers share certain definitions of key structures that are required to be defined in kernel and in userspace. In some instances both userspace and sanitized kernel headers have to be included in order to get the structure definitions required by the user program. Unfortunately because the glibc and Linux headers don't coordinate this can result in compilation errors. The glibc headers have therefore been fixed to coordinate with Linux UAPI-based headers. With the header coordination compilation errors no longer occur.
* When running the TCP/IPv6 traffic over the mlx4_en networking interface on the big endian architectures, call traces reporting about a "hw csum failure" could occur. With this update, the mlx4_en driver has been fixed by correction of the checksum calculation for the big endian architectures. As a result, the call trace error no longer appears in the log messages.
* Under significant load, some applications such as logshifter could generate bursts of log messages too large for the system logger to spool. Due to a race condition, log messages from that application could then be lost even after the log volume dropped to manageable levels. This update fixes the kernel mechanism used to notify the transmitter end of the socket used by the system logger that more space is available on the receiver side, removing a race condition which previously caused the sender to stop transmitting new messages and allowing all log messages to be processed correctly.
* Previously, after heavy open or close of the Accelerator Function Unit (AFU) contexts, the interrupt packet went out and the AFU context did not see any interrupts. Consequently, a kernel panic could occur. The provided patch set fixes handling of the interrupt requests, and kernel panic no longer occurs in the described situation.
* net: recvfrom would fail on short buffer.
These updated kernel packages include several security issues and numerous bug fixes, some of which you can see below.