(RHSA-2014:0419) Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• A flaw was found in the way the Linux kernel processed an authenticated
  COOKIE_ECHO chunk during the initialization of an SCTP connection. A remote
  attacker could use this flaw to crash the system by initiating a specially
  crafted SCTP handshake in order to trigger a NULL pointer dereference on
  the system. (CVE-2014-0101, Important)

Red Hat would like to thank Nokia Siemens Networks for reporting this
issue.

This update also fixes the following bug:

• Due to an incorrect call of the weak-modules script in the kernel spec
  file, the weak-modules directory was removed from the system when removing
  or upgrading certain kernel packages related to weak-modules, such as
  kernel-debug. With this update, the weak-modules call in the kernel spec
  file has been corrected, and the script now preserves the weak-modules
  directory on the system in this scenario. (BZ#1076599)

All kernel users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. The system must be
rebooted for this update to take effect.