kernel-3.10.0-514.21.1.el7

The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system. The kernel handles the basic functions
of the operating system: memory allocation, process allocation, device
input and output, etc.

Security issues fixed with this release:

CVE-2016-10208
The ext4_fill_super function in fs/ext4/super.c in the Linux kernel
through 4.9.8 does not properly validate meta block groups, which
allows physically proximate attackers to cause a denial of service
(out-of-bounds read and system crash) via a crafted ext4 image.
CVE-2016-7910
Use-after-free vulnerability in the disk_seqf_stop function in
block/genhd.c in the Linux kernel before 4.7.1 allows local users to
gain privileges by leveraging the execution of a certain stop
operation even if the corresponding start operation had failed.
CVE-2016-8646
The hash_accept function in crypto/algif_hash.c in the Linux kernel
before 4.3.6 allows local users to cause a denial of service (OOPS) by
attempting to trigger use of in-kernel hash algorithms for a socket
that has received zero bytes of data.
CVE-2017-5986
Race condition in the sctp_wait_for_sndbuf function in
net/sctp/socket.c in the Linux kernel before 4.9.11 allows local users
to cause a denial of service (assertion failure and panic) via a
multithreaded application that peels off an association in a certain
buffer-full state.
CVE-2017-7308
The packet_set_ring function in net/packet/af_packet.c in the Linux
kernel through 4.10.6 does not properly validate certain block-size
data, which allows local users to cause a denial of service (integer
signedness error and out-of-bounds write), or gain privileges (if the
CAP_NET_RAW capability is held), via crafted system calls.

Additional Changes:
This update also fixes several bugs and adds various enhancements.