RHSA-2017:0346: Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operatingsystem.Security Fix(es): A use-after-free flaw was found in the way the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation freed SKB (socket buffer)resources for a DCCPPKTREQUEST packet when the IPV6RECVPKTINFO option is seton the socket. A local, unprivileged user could use this flaw to alter thekernel memory, allowing them to escalate their privileges on the system.(CVE-2017-6074, Important) It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation used the IPv4-only inetskrebuildheader() function forboth IPv4 and IPv6 DCCP connections, which could result in memory corruptions. Aremote attacker could use this flaw to crash the system. (CVE-2017-2634,Moderate)Important: This update disables the DCCP kernel module at load time by using thekernel module blacklist method. The module is disabled in an attempt to reducefurther exposure to additional issues. (BZ#1426309)Red Hat would like to thank Andrey Konovalov (Google) for reportingCVE-2017-6074. The CVE-2017-2634 issue was discovered by Wade Mealing (Red HatProduct Security).