diff --git a/config-generic b/config-generic
index 7444895..5b15dc4 100644
--- a/config-generic
+++ b/config-generic
@@ -1406,7 +1406,7 @@ CONFIG_L2TP_ETH=m
 
 # CONFIG_CAIF is not set
 
-CONFIG_AF_KCM=m
+# CONFIG_AF_KCM is not set
 
 CONFIG_LWTUNNEL=y
 CONFIG_NET_DEVLINK=m
diff --git a/kernel.spec b/kernel.spec
index 01dd3f7..2d8325f 100644
--- a/kernel.spec
+++ b/kernel.spec
@@ -2165,6 +2165,9 @@ fi
 #
 # 
 %changelog
+* Wed Dec 07 2016 Laura Abbott <labbott@fedoraproject.org>
+- Disable CONFIG_AF_KCM (rhbz 1402489)
+
 * Wed Dec 07 2016 Justin M. Forbes <jforbes@fedoraproject.org>
 - CVE-2016-9793 avoid signed overflows for SO_{SND|RCV}BUFFORCE (rhbz 1402013 1402014)