diff --git a/Manifests/Manifest_LAOS-20.0.xml b/Manifests/Manifest_LAOS-20.0.xml
index fd87c9c1..514b5058 100644
--- a/Manifests/Manifest_LAOS-20.0.xml
+++ b/Manifests/Manifest_LAOS-20.0.xml
@@ -57,6 +57,10 @@
 	<project path="hardware/sony/SonyOpenTelephony" name="LineageOS/android_hardware_sony_SonyOpenTelephony" remote="github" revision="lineage-20" />
 	<project path="packages/apps/ElmyraService" name="LineageOS/android_packages_apps_ElmyraService" remote="github" />
 
+	<!-- Essential PH-1 (mata) -->
+	<project path="device/essential/mata" name="LineageOS/android_device_essential_mata" remote="github" revision="lineage-20" />
+	<project path="kernel/essential/msm8998" name="LineageOS/android_kernel_essential_msm8998" remote="github" revision="lineage-20" />
+
 	<!-- F(x)tec Pro¹ (pro1) -->
 	<project path="device/fxtec/pro1" name="LineageOS/android_device_fxtec_pro1" remote="github" revision="lineage-20" />
 	<project path="kernel/fxtec/msm8998" name="LineageOS/android_kernel_fxtec_msm8998" remote="github" revision="lineage-20" />
diff --git a/Scripts/Common/Defaults.sh b/Scripts/Common/Defaults.sh
index dbabf2ad..4af6dc5c 100644
--- a/Scripts/Common/Defaults.sh
+++ b/Scripts/Common/Defaults.sh
@@ -84,18 +84,20 @@ if enter "packages/apps/Updater"; then
 sed -i 's/Constants.UPDATE_RECOVERY_PROPERTY, false)/Constants.UPDATE_RECOVERY_PROPERTY, true)/' src/org/lineageos/updater/UpdatesActivity.java &>/dev/null || true; #Always update recovery by default 18.1+
 fi;
 
-fi [[ "$DOS_VERSION" == "LineageOS-14.1" ]]; then
+if [[ "$DOS_VERSION" == "LineageOS-14.1" ]]; then
+
 if enter "vendor/cm"; then #14.1
 sed -i 's/ro.config.notification_sound=Argon.ogg/ro.config.notification_sound=Pong.ogg/' config/common*.mk &>/dev/null || true;
 sed -i 's/ro.config.alarm_alert=Hassium.ogg/ro.config.alarm_alert=Alarm_Buzzer.ogg/' config/common*.mk &>/dev/null || true;
 fi;
-fi;
 
-fi [[ "$DOS_VERSION" != "LineageOS-14.1" ]]; then
+else
+
 if enter "vendor/lineage"; then #15.1+
 sed -i 's/ro.config.notification_sound=Argon.ogg/ro.config.notification_sound=Pong.ogg/' config/common*.mk &>/dev/null || true;
 sed -i 's/ro.config.alarm_alert=Hassium.ogg/ro.config.alarm_alert=Alarm_Buzzer.ogg/' config/common*.mk &>/dev/null || true;
 fi;
+
 fi;
 
 cd "$DOS_BUILD_BASE";
diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh
new file mode 100644
index 00000000..85738241
--- /dev/null
+++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh
@@ -0,0 +1,192 @@
+#!/bin/bash
+cd "$DOS_BUILD_BASE""kernel/essential/msm8998"
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0015.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-allocsize/4.9/0020.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-bugon/4.4/0008.patch
+#git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-canaries/4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.4/0014.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-misc/4.4/0016.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-random/4.9/0006.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0027.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0031.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0012.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0016.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.4/0005.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slub/4.4/0007.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2015-7837/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-1583/^4.6/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-6187/^4.7/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-8394/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2016-10153/4.9/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0006.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-16USB/ANY/0009.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-0610/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9059/4.9/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-9711/4.4/0003.patch
+#git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13218/4.4/0019.patch
+#git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13218/4.4/0025.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13693/^4.12.9/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-13694/^4.12.9/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-17052/4.9/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18174/^4.10/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18204/4.4/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-18306/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2017-1000252/^4.13/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5896/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5897/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5905/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5906/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5908/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5909/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-5910/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-9415/ANY/0005.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11273/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11818/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11919/4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11984/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11986/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11987/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11988/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-11988/ANY/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-12010/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13912/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13913/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13914/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13917/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-13920/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2018-16597/4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2054/ANY/0013.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2054/ANY/0014.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2264/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2333/ANY/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-2341/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-8912/^5.0/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10494/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10503/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10503/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10515/ANY/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10524/ANY/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10527/ANY/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10555/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10584/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10614/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-10622/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12378/^5.1.5/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12456/^5.1.5/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14040/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14041/ANY/0002.patch
+#git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14047/ANY/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-15291/4.4/0006.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-16994/4.9/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19051/4.4/0012.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-19068/4.4/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-11160/4.4/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-14386/3.10-^4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-16119/^5.10/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-0935/4.9/0006.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-0936/ANY/0005.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-0936/ANY/0011.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-1963/ANY/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-4034/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-4149/4.4/0007.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-20292/4.9/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-33656/4.4/0007.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-42739/4.9/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-0435/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-0487/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-0492/4.9/0007.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-0494/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1011/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1016/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1184/4.9/0007.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1198/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1199/4.9/0010.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1199/4.9/0011.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1353/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1516/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1652/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1679/^5.19/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1729/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1734/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1836/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1974/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-1975/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2153/^5.17/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2318/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2380/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2503/4.9/0004.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2588/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2639/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2663/4.4/0011.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2663/4.4/0012.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2964/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-2978/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3028/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3061/^5.18/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3111/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3202/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3424/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3524/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3542/3.8-^6.0/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3565/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3594/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3621/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3628/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3629/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3635/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3646/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-3649/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4378/4.9/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-4662/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-20368/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23037/4.9/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23039/4.9/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23040/4.9/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-23042/4.9/0003.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-26490/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-26966/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27223/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-27950/^5.16/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-28356/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-28390/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-30594/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-32981/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-33740/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-33744/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-36123/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-36280/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-36879/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-36946/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-39188/4.4/0010.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-39842/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-40768/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-41849/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-41850/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-41858/4.4/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42328/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42703/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42895/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42896/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42896/4.4/0009.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-42896-extra/4.4/0002.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-43750/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-45934/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0047/4.4/0008.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-0394/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-23559/^6.2/0001.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
+git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch
+editKernelLocalversion "-dos.p188"
+cd "$DOS_BUILD_BASE"
diff --git a/Scripts/LineageOS-20.0/Functions.sh b/Scripts/LineageOS-20.0/Functions.sh
index d7f17fab..6ff783eb 100644
--- a/Scripts/LineageOS-20.0/Functions.sh
+++ b/Scripts/LineageOS-20.0/Functions.sh
@@ -19,7 +19,7 @@ umask 0022;
 #Last verified: 2022-10-15
 
 patchAllKernels() {
-	startPatcher "kernel_fairphone_sm7225 kernel_fxtec_msm8998 kernel_google_gs101_private_gs-google kernel_google_gs201_private_gs-google kernel_google_msm-4.9 kernel_google_msm-4.14 kernel_google_redbull kernel_google_wahoo kernel_oneplus_msm8998 kernel_oneplus_sdm845 kernel_oneplus_sm8150 kernel_oneplus_sm8250 kernel_oneplus_sm8350 kernel_razer_sdm845 kernel_sony_sdm845 kernel_xiaomi_sdm845";
+	startPatcher "kernel_essential_msm8998 kernel_fairphone_sm7225 kernel_fxtec_msm8998 kernel_google_gs101_private_gs-google kernel_google_gs201_private_gs-google kernel_google_msm-4.9 kernel_google_msm-4.14 kernel_google_redbull kernel_google_wahoo kernel_oneplus_msm8998 kernel_oneplus_sdm845 kernel_oneplus_sm8150 kernel_oneplus_sm8250 kernel_oneplus_sm8350 kernel_razer_sdm845 kernel_sony_sdm845 kernel_xiaomi_sdm845";
 }
 export -f patchAllKernels;
 
@@ -55,6 +55,7 @@ buildAll() {
 	buildDevice walleye avb; #unb
 	buildDevice cheeseburger verity;
 	buildDevice dumpling verity;
+	buildDevice mata verity; #unb
 	#SD845
 	buildDevice fajita avb;
 	buildDevice enchilada avb;
diff --git a/Scripts/LineageOS-20.0/Patch.sh b/Scripts/LineageOS-20.0/Patch.sh
index e4d9ec03..fae66373 100644
--- a/Scripts/LineageOS-20.0/Patch.sh
+++ b/Scripts/LineageOS-20.0/Patch.sh
@@ -415,6 +415,10 @@ fi;
 #
 #START OF DEVICE CHANGES
 #
+if enterAndClear "device/essential/mata"; then
+echo "allow permissioncontroller_app tethering_service:service_manager find;" > sepolicy/private/permissioncontroller_app.te;
+fi;
+
 if enterAndClear "device/google/gs101"; then
 if [ "$DOS_DEBLOBBER_REMOVE_CNE" = true ]; then sed -i '/google iwlan/,+8d' device.mk; fi; #fix stray
 fi;