Update CVE patchers

Signed-off-by: Tavi <tavi@divested.dev>
This commit is contained in:
Tavi 2024-12-06 15:20:13 -05:00
parent 9cb051937a
commit 125911311b
No known key found for this signature in database
GPG Key ID: E599F62ECBAEAF2E
39 changed files with 81 additions and 39 deletions

View File

@ -726,7 +726,7 @@ tools/external_updater 1dc2143b13455b4ab0e2a0aa59dda791c0b0084f
tools/loganalysis eec32327da28db6f5e599a4ab76f7c93995896ef
tools/metalava edcafddcb54e149af8d4135a346501dde802fb30
tools/ndkports 74fefbc2160250129cbd157272fcfb3c9ac20f18
tools/repohooks 7278e0dc738d7771d59199433432d199432c9406
tools/repohooks 17bc37e59b3c332a9740b97e01b239ffa309503f
tools/security 3c5ee5d6f2f50895611eacd71a62b11efcfb0648
tools/test/connectivity 4857a1a24ab6fd537bc4186fc88548c2b9c29e82
tools/test/graphicsbenchmark 143e833b3762e93b0a1fe6a6bc127f09e5afade8

View File

@ -859,7 +859,7 @@ tools/loganalysis 915dbf1d7ed0f684d2d1bc3a6be9ef417c93527d
tools/metalava 21659a2683eed66e16aeafeb8d9c40916946a51b
tools/ndkports d0ec81e4b134f4b1446d3fd5a6dfbf095475597c
tools/platform-compat b553fea7dd2aa8dcc26f4d8f91effd86e55dd72e
tools/repohooks 7278e0dc738d7771d59199433432d199432c9406
tools/repohooks 17bc37e59b3c332a9740b97e01b239ffa309503f
tools/security a5c3644bd83674858e0b9d5da3e6014a3cbf3ba6
tools/test/connectivity 38ccb70b61038b0be21da87ae626b01a3d162bf8
tools/test/graphicsbenchmark 7c31a9c1f32d602e1b50446951088d3beddedb84

View File

@ -1083,7 +1083,7 @@ tools/extract-utils c12d3941893a6d1187986d85be04308104d13269
tools/metalava 0d8be7040dceaf9b084e909b6907e463ab7d3237
tools/ndkports a181fe59a34803a1ba7300bd1a32532b6dc3e9fb
tools/platform-compat cfa5a189e9671992ba7ad5b8de5d59826544a592
tools/repohooks 7278e0dc738d7771d59199433432d199432c9406
tools/repohooks 17bc37e59b3c332a9740b97e01b239ffa309503f
tools/security 4af6777ed4b7a9c09508a600349e0e548174361f
tools/test/connectivity a74e9d3afee07e92cc9f74345f91ea7cbe29d44d
tools/test/graphicsbenchmark 6404f16911f96d9253847c1390fd81f1923954cd

View File

@ -1129,7 +1129,7 @@ packages/apps/ThemePicker 23a6a5ee543d6d588c3a5d3f88cb3e73bacbb341
packages/apps/Traceur 502271cf2636652907facf05d1fe00e2c5f83fcb
packages/apps/Trebuchet 5efbfaaf8b01176a7f86855adaaa6dbcd16dc7a1
packages/apps/TvFeedbackConsent 784429c3efe3567f37e79ba195d557c21e8a4e56
packages/apps/TvSettings b733bcb5add8f50f9261c3036239f1ac37e8ac0c
packages/apps/TvSettings d71902613e41c3980c934d138f22bd115b972f8e
packages/apps/TvSystemUI adddf3323e91d794360bcdb8b5c8bc15bfe7c042
packages/apps/UniversalMediaPlayer f702e26a7b8c26a43bb2a1f56a034b54159daaca
packages/apps/Updater 589762cef61fb95c4caadd5cf6e174466e981693

@ -1 +1 @@
Subproject commit 7999a137299169ec1f06a1dcf1a6134bd0be295a
Subproject commit afd4f3b1d63cdbf680cf0eb2b45fd279a79348ac

View File

@ -1265,6 +1265,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47222/4.14/0002.patch
@ -1272,7 +1273,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
editKernelLocalversion "-dos.p1272"
editKernelLocalversion "-dos.p1273"
else echo "kernel_xiaomi_sm6150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1048,6 +1048,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0429/4.4/0012.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.4/0007.patch
@ -1056,7 +1057,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-37159/4.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p1056"
editKernelLocalversion "-dos.p1057"
else echo "kernel_yandex_sdm660 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -692,11 +692,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p696"
editKernelLocalversion "-dos.p697"
else echo "kernel_xiaomi_sdm660 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1348,6 +1348,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
@ -1360,7 +1361,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p1360"
editKernelLocalversion "-dos.p1361"
else echo "kernel_xiaomi_sm8150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -714,6 +714,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch
@ -721,7 +722,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p721"
editKernelLocalversion "-dos.p722"
else echo "kernel_essential_msm8998 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -561,6 +561,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -572,7 +573,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-alt/4.9/0001.patch
editKernelLocalversion "-dos.p572"
editKernelLocalversion "-dos.p573"
else echo "kernel_fairphone_sdm632 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -644,13 +644,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53136/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p650"
editKernelLocalversion "-dos.p652"
else echo "kernel_fairphone_sm7225 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -667,11 +667,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p671"
editKernelLocalversion "-dos.p672"
else echo "kernel_fxtec_msm8998 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -644,13 +644,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53136/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p650"
editKernelLocalversion "-dos.p652"
else echo "kernel_fxtec_sm6115 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1279,6 +1279,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53121/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53137/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53138/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47195/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.10/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.10/0002.patch
@ -1291,7 +1293,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-49881/5.10/0002.patch
editKernelLocalversion "-dos.p1291"
editKernelLocalversion "-dos.p1293"
else echo "kernel_google_gs101_private_gs-google is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1277,6 +1277,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53121/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53137/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53138/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47195/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.10/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.10/0002.patch
@ -1289,7 +1291,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-49881/5.10/0002.patch
editKernelLocalversion "-dos.p1289"
editKernelLocalversion "-dos.p1291"
else echo "kernel_google_gs201_private_gs-google is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -606,6 +606,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33063/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
@ -613,7 +614,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p613"
editKernelLocalversion "-dos.p614"
else echo "kernel_google_msm-4.14 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -568,6 +568,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -579,7 +580,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p579"
editKernelLocalversion "-dos.p580"
else echo "kernel_google_msm-4.9 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -869,13 +869,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53136/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p875"
editKernelLocalversion "-dos.p877"
else echo "kernel_google_redbull is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -688,6 +688,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch
@ -695,7 +696,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p695"
editKernelLocalversion "-dos.p696"
else echo "kernel_google_wahoo is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -667,11 +667,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p671"
editKernelLocalversion "-dos.p672"
else echo "kernel_lge_msm8996 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -672,11 +672,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p676"
editKernelLocalversion "-dos.p677"
else echo "kernel_oneplus_msm8998 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -575,6 +575,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -586,7 +587,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p586"
editKernelLocalversion "-dos.p587"
else echo "kernel_oneplus_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -698,13 +698,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53136/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p704"
editKernelLocalversion "-dos.p706"
else echo "kernel_oneplus_sm7250 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1303,6 +1303,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
@ -1314,7 +1315,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p1314"
editKernelLocalversion "-dos.p1315"
else echo "kernel_oneplus_sm8150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -645,13 +645,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53136/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p651"
editKernelLocalversion "-dos.p653"
else echo "kernel_oneplus_sm8250 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -791,6 +791,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53121/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53138/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47195/5.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.4/0003.patch
@ -803,7 +804,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/5.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.4/0005.patch
editKernelLocalversion "-dos.p803"
editKernelLocalversion "-dos.p804"
else echo "kernel_oneplus_sm8350 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -667,11 +667,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p671"
editKernelLocalversion "-dos.p672"
else echo "kernel_razer_msm8998 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -571,6 +571,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -582,7 +583,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p582"
editKernelLocalversion "-dos.p583"
else echo "kernel_razer_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1185,6 +1185,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14283/4.9/0008.patch
@ -1193,7 +1194,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
editKernelLocalversion "-dos.p1193"
editKernelLocalversion "-dos.p1194"
else echo "kernel_samsung_exynos9810 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -688,11 +688,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p692"
editKernelLocalversion "-dos.p693"
else echo "kernel_sony_sdm660 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -1083,6 +1083,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-2024/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-2024/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-2024/4.9/0004.patch
@ -1100,7 +1101,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p1100"
editKernelLocalversion "-dos.p1101"
else echo "kernel_sony_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -564,6 +564,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -575,7 +576,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p575"
editKernelLocalversion "-dos.p576"
else echo "kernel_xiaomi_msm8937 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -578,6 +578,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -589,7 +590,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p589"
editKernelLocalversion "-dos.p590"
else echo "kernel_xiaomi_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -643,6 +643,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33063/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
@ -650,7 +651,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p650"
editKernelLocalversion "-dos.p651"
else echo "kernel_xiaomi_sm6150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -530,10 +530,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53136/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53142/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-26720/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p533"
editKernelLocalversion "-dos.p535"
else echo "kernel_xiaomi_sm8250 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -647,6 +647,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/4.19/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53130/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53131/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53140/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33063/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
@ -654,7 +655,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p654"
editKernelLocalversion "-dos.p655"
else echo "kernel_xiaomi_vayu is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -680,12 +680,13 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-26145/qcacld-2.0/0008.patch --directory=drivers/staging/qcacld-2.0
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p685"
editKernelLocalversion "-dos.p686"
else echo "kernel_zuk_msm8996 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View File

@ -688,6 +688,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53112/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53141/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch
@ -695,7 +696,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch
editKernelLocalversion "-dos.p695"
editKernelLocalversion "-dos.p696"
else echo "kernel_google_wahoo is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"