[ALAS-2016-703] Amazon Linux AMI 2014.03 - ALAS-2016-703: medium priority package update for kernel

Package updates are available for Amazon Linux AMI that fix the following vulnerabilities:
CVE-2016-4581:
1333712:
CVE-2016-4581 kernel: Slave being first propagated copy causes oops in propagate_mnt

CVE-2016-4565:
1310570:
CVE-2016-4565 kernel: infiniband: Unprivileged process can overwrite kernel memory using rdma_ucm.ko

CVE-2016-4558:
1334303:
CVE-2016-4558 kernel: bpf: refcnt overflow

CVE-2016-4557:
1334307:
CVE-2016-4557 kernel: Use after free vulnerability via double fdput

CVE-2016-4486:
1333316:
CVE-2016-4486 kernel: Information leak in rtnetlink

CVE-2016-4485:
1333309:
CVE-2016-4485 kernel: Information leak in llc module

CVE-2016-3961:
Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest users to cause a denial of service (guest OS crash) by attempting to access a hugetlbfs mapped area.
1323956:
CVE-2016-3961 xsa174 xen: hugetlbfs use may crash PV Linux guests (XSA-174)

CVE-2016-0758:
A flaw was found in the way the Linux kernel's ASN.1 DER decoder processed certain certificate files with tags of indefinite length. A local, unprivileged user could use a specially crafted X.509 certificate DER file to crash the system or, potentially, escalate their privileges on the system.
1300257:
CVE-2016-0758 kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()

CVE-2015-8839:
Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause a denial of service (disk corruption) by writing to a page that is associated with a different user's file after unsynchronized hole punching and page-fault handling.
1323577:
CVE-2015-8839 kernel: ext4 filesystem page fault race condition with fallocate call.