Update CVE patchers

Signed-off-by: Tad <tad@spotco.us>
2024-09-27 19:56:32 +00:00 · 2023-12-04 14:39:56 -05:00 · 2023-12-04 14:39:56 -05:00 · 26c0951cd2
commit 26c0951cd2
parent 5c99bc4098
18 changed files with 42 additions and 21 deletions
--- a/Patches/Linux
+++ b/Patches/Linux
@ -1 +1 @@
-Subproject commit 7143782a268ba036cdccc421ce86dcfd99a7638f
+Subproject commit f7dcfe8113e33d7e6a4c44d76b6e1457345f52aa
--- a/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_xiaomi_sm6150.sh
+++ b/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_xiaomi_sm6150.sh
@ -361,6 +361,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0459/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0461/4.14/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.14/0002.patch
@ -437,7 +438,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
-editKernelLocalversion "-dos.p437"
+editKernelLocalversion "-dos.p438"
 else echo "kernel_xiaomi_sm6150 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_xiaomi_sm8150.sh
+++ b/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_xiaomi_sm8150.sh
@ -458,6 +458,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0459/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0461/4.14/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.14/0002.patch
@ -524,6 +525,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/4.14/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33070/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/4.14/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35824/4.14/0003.patch
@ -540,7 +542,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-27830/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-29660/4.14/0002.patch
-editKernelLocalversion "-dos.p540"
+editKernelLocalversion "-dos.p542"
 else echo "kernel_xiaomi_sm8150 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh
@ -236,7 +236,6 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-30772/4.4/0008.patch
 #git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/4.4/0001.patch
-git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33059/ANY/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34324/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/4.4/0008.patch
@ -251,7 +250,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/4.4/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
 git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
 git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch
-editKernelLocalversion "-dos.p251"
+editKernelLocalversion "-dos.p250"
 else echo "kernel_essential_msm8998 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh
@ -74,6 +74,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20571/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0030/^4.20/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0386/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-4133/^6.3/0001.patch
@ -85,7 +86,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23000/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-28553/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.19/0003.patch
-editKernelLocalversion "-dos.p85"
+editKernelLocalversion "-dos.p86"
 else echo "kernel_fairphone_sm7225 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_msm8998.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_msm8998.sh
@ -145,7 +145,6 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0047/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.4/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.4/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.4/0001.patch
-git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.4/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.4/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1095/4.4/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1118/4.4/0007.patch
@ -197,7 +196,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-40283/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42752/^6.5/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42754/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/4.4/0001.patch
-editKernelLocalversion "-dos.p197"
+editKernelLocalversion "-dos.p196"
 else echo "kernel_fxtec_msm8998 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_sm6115.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_sm6115.sh
@ -74,6 +74,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20571/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0030/^4.20/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0386/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-4133/^6.3/0001.patch
@ -85,7 +86,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23000/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-28553/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.19/0003.patch
-editKernelLocalversion "-dos.p85"
+editKernelLocalversion "-dos.p86"
 else echo "kernel_fxtec_sm6115 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs101_private_gs-google.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs101_private_gs-google.sh
@ -157,6 +157,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32233/5.10/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/5.10/0005.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33053/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34324/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/5.10/0004.patch
@ -178,7 +179,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42754/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/5.10/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/5.10/0004.patch
-editKernelLocalversion "-dos.p178"
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-46862/5.10/0003.patch
+editKernelLocalversion "-dos.p180"
 else echo "kernel_google_gs101_private_gs-google is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs201_private_gs-google.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs201_private_gs-google.sh
@ -155,6 +155,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32233/5.10/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/5.10/0005.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33053/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34324/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/5.10/0004.patch
@ -176,7 +177,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42754/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/5.10/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/5.10/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/5.10/0004.patch
-editKernelLocalversion "-dos.p176"
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-46862/5.10/0003.patch
+editKernelLocalversion "-dos.p178"
 else echo "kernel_google_gs201_private_gs-google is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.14.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.14.sh
@ -68,6 +68,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3061/^5.18/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4382/^6.2/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20382/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3567/4.14/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
@ -75,8 +76,9 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-21657/4.14/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23000/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-28554/ANY/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33070/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.14/0002.patch
-editKernelLocalversion "-dos.p76"
+editKernelLocalversion "-dos.p78"
 else echo "kernel_google_msm-4.14 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_redbull.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_redbull.sh
@ -112,6 +112,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0459/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0461/4.19/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.19/0003.patch
@ -178,6 +179,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32233/4.19/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/4.19/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33106/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33107/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34324/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/4.19/0007.patch
@ -196,7 +199,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42755/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/4.19/0003.patch
-editKernelLocalversion "-dos.p196"
+editKernelLocalversion "-dos.p199"
 else echo "kernel_google_redbull is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_lge_msm8996.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_lge_msm8996.sh
@ -145,7 +145,6 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0047/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.4/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.4/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.4/0001.patch
-git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.4/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.4/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1095/4.4/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1118/4.4/0007.patch
@ -197,7 +196,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-40283/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42752/^6.5/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42754/4.4/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/4.4/0001.patch
-editKernelLocalversion "-dos.p197"
+editKernelLocalversion "-dos.p196"
 else echo "kernel_lge_msm8996 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm7250.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm7250.sh
@ -79,6 +79,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-45887/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-45919/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0030/^4.20/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0386/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1077/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1118/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1206/4.19/0003.patch
@ -131,6 +132,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32233/4.19/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33106/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33107/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34324/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/4.19/0007.patch
@ -149,7 +152,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42755/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45862/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/4.19/0003.patch
-editKernelLocalversion "-dos.p149"
+editKernelLocalversion "-dos.p152"
 else echo "kernel_oneplus_sm7250 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8150.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8150.sh
@ -425,6 +425,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0458/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0459/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0461/4.14/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0615/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1073/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1074/4.14/0002.patch
@ -491,6 +492,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32269/4.14/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33070/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34256/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/4.14/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35824/4.14/0003.patch
@ -506,7 +508,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-27830/4.14/0002.patch
-editKernelLocalversion "-dos.p506"
+editKernelLocalversion "-dos.p508"
 else echo "kernel_oneplus_sm8150 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8250.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8250.sh
@ -72,6 +72,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20571/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0030/^4.20/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0386/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-4133/^6.3/0001.patch
@ -83,7 +84,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23000/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-28553/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.19/0003.patch
-editKernelLocalversion "-dos.p83"
+editKernelLocalversion "-dos.p84"
 else echo "kernel_oneplus_sm8250 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm6150.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm6150.sh
@ -1,6 +1,5 @@
 #!/bin/bash
 if cd "$DOS_BUILD_BASE""kernel/xiaomi/sm6150"; then
-git apply $DOS_PATCHES_LINUX_CVES/0001-LinuxIncrementals/4.14/4.14.0326-0327.patch --exclude=Makefile
 git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-Steam/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/0003-syzkaller-Misc/ANY/0008.patch
 git apply $DOS_PATCHES_LINUX_CVES/0005-Graphene-Deny_USB/4.14/0003.patch
@ -72,6 +71,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20158/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20158/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20371/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3567/4.14/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm8250.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm8250.sh
@ -80,6 +80,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-45887/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-45919/4.19/0004.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0030/^4.20/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0386/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1077/4.19/0006.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1206/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1380/4.19/0003.patch
@ -112,6 +113,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31084/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31085/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-32233/4.19/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33106/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33107/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-34324/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35001/4.19/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-35788/4.19/0002.patch
@ -128,7 +131,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42754/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-42755/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.19/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45871/4.19/0003.patch
-editKernelLocalversion "-dos.p128"
+editKernelLocalversion "-dos.p131"
 else echo "kernel_xiaomi_sm8250 is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"
--- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_vayu.sh
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_vayu.sh
@ -69,6 +69,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20158/4.14/0002.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20158/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20371/ANY/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0590/4.14/0005.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-1989/4.14/0003.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3567/4.14/0007.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-3777/^6.5/0001.patch
@ -76,7 +77,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23000/^5.16/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-28553/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-31083/^6.5/0001.patch
 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-45863/4.14/0002.patch
-editKernelLocalversion "-dos.p76"
+editKernelLocalversion "-dos.p77"
 else echo "kernel_xiaomi_vayu is unavailable, not patching.";
 fi;
 cd "$DOS_BUILD_BASE"