kernel-3.10.0-693.11.1.el7

The kernel packages contain the Linux kernel, the core of any Linux operating system.

These updated kernel packages include several security issues and numerous bug fixes, some of which you can see below. Space precludes documenting
all of these bug fixes in this advisory. To see the complete list of bug fixes, users are directed to the related.

Security Fix(es):

* It was found that the timer functionality in the Linux kernel ALSA subsystem is prone to a race condition between read and ioctl system call handlers, resulting in an uninitialized memory disclosure to user space. A local user could use this flaw to read information belonging to other users. (CVE-2017-1000380, Moderate)

Asianux would like to thank Alexander Potapenko (Google) for reporting this issue.

CVE-2017-1000380
sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a
data race in the ALSA /dev/snd/timer driver resulting in local users
being able to read information belonging to other users, i.e.,
uninitialized memory contents may be disclosed when a read and an ioctl
happen at the same time.