From 653819edcd7f41d44d88a8b22141f41f48618d83 Mon Sep 17 00:00:00 2001 From: Tavi Date: Thu, 8 Aug 2024 15:02:19 -0400 Subject: [PATCH] Update CVE patchers Signed-off-by: Tavi --- Patches/Linux | 2 +- .../CVE_Patchers/android_kernel_xiaomi_sm6150.sh | 3 ++- .../CVE_Patchers/android_kernel_yandex_sdm660.sh | 3 ++- .../CVE_Patchers/android_kernel_xiaomi_sdm660.sh | 5 ++++- .../CVE_Patchers/android_kernel_xiaomi_sm8150.sh | 3 ++- .../CVE_Patchers/android_kernel_essential_msm8998.sh | 4 +++- .../CVE_Patchers/android_kernel_fairphone_sdm632.sh | 4 +++- .../CVE_Patchers/android_kernel_fairphone_sm7225.sh | 5 ++++- .../CVE_Patchers/android_kernel_fxtec_msm8998.sh | 5 ++++- .../CVE_Patchers/android_kernel_fxtec_sm6115.sh | 5 ++++- .../android_kernel_google_gs101_private_gs-google.sh | 7 ++++++- .../android_kernel_google_gs201_private_gs-google.sh | 7 ++++++- .../CVE_Patchers/android_kernel_google_msm-4.14.sh | 4 +++- .../CVE_Patchers/android_kernel_google_msm-4.9.sh | 4 +++- .../CVE_Patchers/android_kernel_google_redbull.sh | 5 ++++- .../CVE_Patchers/android_kernel_google_wahoo.sh | 4 +++- .../CVE_Patchers/android_kernel_lge_msm8996.sh | 5 ++++- .../CVE_Patchers/android_kernel_oneplus_msm8998.sh | 5 ++++- .../CVE_Patchers/android_kernel_oneplus_sdm845.sh | 5 ++++- .../CVE_Patchers/android_kernel_oneplus_sm7250.sh | 5 ++++- .../CVE_Patchers/android_kernel_oneplus_sm8150.sh | 3 ++- .../CVE_Patchers/android_kernel_oneplus_sm8250.sh | 5 ++++- .../CVE_Patchers/android_kernel_oneplus_sm8350.sh | 4 +++- .../CVE_Patchers/android_kernel_razer_msm8998.sh | 5 ++++- .../CVE_Patchers/android_kernel_razer_sdm845.sh | 5 ++++- .../CVE_Patchers/android_kernel_samsung_exynos9810.sh | 3 ++- .../CVE_Patchers/android_kernel_sony_sdm660.sh | 3 ++- .../CVE_Patchers/android_kernel_sony_sdm845.sh | 3 ++- .../CVE_Patchers/android_kernel_xiaomi_msm8937.sh | 4 +++- .../CVE_Patchers/android_kernel_xiaomi_sdm845.sh | 4 +++- .../CVE_Patchers/android_kernel_xiaomi_sm6150.sh | 5 ++++- .../CVE_Patchers/android_kernel_xiaomi_sm8250.sh | 5 ++++- .../CVE_Patchers/android_kernel_xiaomi_vayu.sh | 5 ++++- .../CVE_Patchers/android_kernel_zuk_msm8996.sh | 5 ++++- 34 files changed, 115 insertions(+), 34 deletions(-) diff --git a/Patches/Linux b/Patches/Linux index 866eb5c3..58b833c4 160000 --- a/Patches/Linux +++ b/Patches/Linux @@ -1 +1 @@ -Subproject commit 866eb5c3af743b6196fbac76fa21bb31811e675e +Subproject commit 58b833c43591da6ba3d1f8e8b2873b2838ba1d4a diff --git a/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_xiaomi_sm6150.sh b/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_xiaomi_sm6150.sh index d5eadbcf..844854e9 100644 --- a/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_xiaomi_sm6150.sh +++ b/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_xiaomi_sm6150.sh @@ -992,6 +992,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47222/4.14/0002.patch @@ -999,7 +1000,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p999" +editKernelLocalversion "-dos.p1000" else echo "kernel_xiaomi_sm6150 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_yandex_sdm660.sh b/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_yandex_sdm660.sh index c8caa01e..591b254d 100644 --- a/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_yandex_sdm660.sh +++ b/Scripts/LineageOS-17.1/CVE_Patchers/android_kernel_yandex_sdm660.sh @@ -861,6 +861,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0429/4.4/0012.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.4/0007.patch @@ -869,7 +870,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-37159/4.4/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p869" +editKernelLocalversion "-dos.p870" else echo "kernel_yandex_sdm660 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-18.1/CVE_Patchers/android_kernel_xiaomi_sdm660.sh b/Scripts/LineageOS-18.1/CVE_Patchers/android_kernel_xiaomi_sdm660.sh index 7137e97d..945b1d6d 100644 --- a/Scripts/LineageOS-18.1/CVE_Patchers/android_kernel_xiaomi_sdm660.sh +++ b/Scripts/LineageOS-18.1/CVE_Patchers/android_kernel_xiaomi_sdm660.sh @@ -505,11 +505,14 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p509" +editKernelLocalversion "-dos.p512" else echo "kernel_xiaomi_sdm660 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_xiaomi_sm8150.sh b/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_xiaomi_sm8150.sh index 0bc6030b..bf611db3 100644 --- a/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_xiaomi_sm8150.sh +++ b/Scripts/LineageOS-19.1/CVE_Patchers/android_kernel_xiaomi_sm8150.sh @@ -1072,6 +1072,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch @@ -1082,7 +1083,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p1082" +editKernelLocalversion "-dos.p1083" else echo "kernel_xiaomi_sm8150 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh index a764e18d..c884fc04 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_essential_msm8998.sh @@ -532,6 +532,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch @@ -539,7 +541,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p539" +editKernelLocalversion "-dos.p541" else echo "kernel_essential_msm8998 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sdm632.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sdm632.sh index 71febafd..14bba8ff 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sdm632.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sdm632.sh @@ -400,6 +400,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -409,7 +411,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p409" +editKernelLocalversion "-dos.p411" else echo "kernel_fairphone_sdm632 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh index 81c16aa4..825cc2cc 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fairphone_sm7225.sh @@ -421,13 +421,16 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p427" +editKernelLocalversion "-dos.p430" else echo "kernel_fairphone_sm7225 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_msm8998.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_msm8998.sh index 4f2e0c8f..03eb04e6 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_msm8998.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_msm8998.sh @@ -483,11 +483,14 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p487" +editKernelLocalversion "-dos.p490" else echo "kernel_fxtec_msm8998 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_sm6115.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_sm6115.sh index 9014aaae..9ecc523e 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_sm6115.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_fxtec_sm6115.sh @@ -421,13 +421,16 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p427" +editKernelLocalversion "-dos.p430" else echo "kernel_fxtec_sm6115 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs101_private_gs-google.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs101_private_gs-google.sh index 846fa524..2703d8ed 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs101_private_gs-google.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs101_private_gs-google.sh @@ -859,6 +859,11 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42161/5.10/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/5.10/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/5.10/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42229/5.10/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/5.10/0004.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/5.10/0004.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42242/^6.10/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42244/5.10/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/5.10/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.10/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.10/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/5.10/0003.patch @@ -868,7 +873,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/5.10/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.10/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.10/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.10/0003.patch -editKernelLocalversion "-dos.p868" +editKernelLocalversion "-dos.p873" else echo "kernel_google_gs101_private_gs-google is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs201_private_gs-google.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs201_private_gs-google.sh index 4ed7da4a..0473f018 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs201_private_gs-google.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_gs201_private_gs-google.sh @@ -857,6 +857,11 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42161/5.10/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/5.10/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/5.10/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42229/5.10/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/5.10/0004.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/5.10/0004.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42242/^6.10/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42244/5.10/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/5.10/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.10/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.10/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/5.10/0003.patch @@ -866,7 +871,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/5.10/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.10/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.10/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.10/0003.patch -editKernelLocalversion "-dos.p866" +editKernelLocalversion "-dos.p871" else echo "kernel_google_gs201_private_gs-google is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.14.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.14.sh index c35c28ea..19fb1f74 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.14.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.14.sh @@ -383,12 +383,14 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p388" +editKernelLocalversion "-dos.p390" else echo "kernel_google_msm-4.14 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.9.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.9.sh index 4b3cfcc6..4141984e 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.9.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_msm-4.9.sh @@ -399,6 +399,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -408,7 +410,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p408" +editKernelLocalversion "-dos.p410" else echo "kernel_google_msm-4.9 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_redbull.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_redbull.sh index 4854e770..324a4018 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_redbull.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_redbull.sh @@ -624,13 +624,16 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p630" +editKernelLocalversion "-dos.p633" else echo "kernel_google_redbull is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_wahoo.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_wahoo.sh index 1274c94f..0f72a18f 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_wahoo.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_google_wahoo.sh @@ -500,6 +500,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-slab/4.4/0004.patch @@ -507,7 +509,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p507" +editKernelLocalversion "-dos.p509" else echo "kernel_google_wahoo is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_lge_msm8996.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_lge_msm8996.sh index c0420b4e..8aadb530 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_lge_msm8996.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_lge_msm8996.sh @@ -483,11 +483,14 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p487" +editKernelLocalversion "-dos.p490" else echo "kernel_lge_msm8996 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_msm8998.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_msm8998.sh index 5c410bc7..4eaa0355 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_msm8998.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_msm8998.sh @@ -487,11 +487,14 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p491" +editKernelLocalversion "-dos.p494" else echo "kernel_oneplus_msm8998 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sdm845.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sdm845.sh index 97e411b5..f3bfcb39 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sdm845.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sdm845.sh @@ -404,6 +404,9 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -413,7 +416,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p413" +editKernelLocalversion "-dos.p416" else echo "kernel_oneplus_sdm845 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm7250.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm7250.sh index 9a439ab1..8e2656bd 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm7250.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm7250.sh @@ -473,13 +473,16 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p479" +editKernelLocalversion "-dos.p482" else echo "kernel_oneplus_sm7250 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8150.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8150.sh index 2064191b..98f49293 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8150.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8150.sh @@ -1038,6 +1038,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch @@ -1047,7 +1048,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p1047" +editKernelLocalversion "-dos.p1048" else echo "kernel_oneplus_sm8150 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8250.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8250.sh index 0eca16b9..6d0fff8f 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8250.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8250.sh @@ -419,13 +419,16 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p425" +editKernelLocalversion "-dos.p428" else echo "kernel_oneplus_sm8250 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8350.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8350.sh index df1bdb1e..587a9d92 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8350.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_oneplus_sm8350.sh @@ -497,6 +497,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/5.4/0005.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/5.4/0005.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/5.4/0005.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/5.4/0005.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/5.4/0006.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/5.4/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.4/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2022-48783/^5.17/0001.patch @@ -507,7 +509,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/5.4/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.4/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.4/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.4/0005.patch -editKernelLocalversion "-dos.p507" +editKernelLocalversion "-dos.p509" else echo "kernel_oneplus_sm8350 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_msm8998.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_msm8998.sh index 4614d86b..5824822a 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_msm8998.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_msm8998.sh @@ -483,11 +483,14 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p487" +editKernelLocalversion "-dos.p490" else echo "kernel_razer_msm8998 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_sdm845.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_sdm845.sh index dba82446..7506b795 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_sdm845.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_razer_sdm845.sh @@ -400,6 +400,9 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -409,7 +412,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p409" +editKernelLocalversion "-dos.p412" else echo "kernel_razer_sdm845 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_samsung_exynos9810.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_samsung_exynos9810.sh index 19ca387f..5ba99b4f 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_samsung_exynos9810.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_samsung_exynos9810.sh @@ -1016,6 +1016,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14283/4.9/0008.patch @@ -1024,7 +1025,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p1024" +editKernelLocalversion "-dos.p1025" else echo "kernel_samsung_exynos9810 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm660.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm660.sh index ebf9f11d..30a2344c 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm660.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm660.sh @@ -500,11 +500,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p504" +editKernelLocalversion "-dos.p505" else echo "kernel_sony_sdm660 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm845.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm845.sh index 2014ce93..9ce28821 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm845.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_sony_sdm845.sh @@ -882,6 +882,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -893,7 +894,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p893" +editKernelLocalversion "-dos.p894" else echo "kernel_sony_sdm845 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_msm8937.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_msm8937.sh index 64f10f4b..645fcc8e 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_msm8937.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_msm8937.sh @@ -399,6 +399,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -408,7 +410,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p408" +editKernelLocalversion "-dos.p410" else echo "kernel_xiaomi_msm8937 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sdm845.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sdm845.sh index 863c7348..7053d911 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sdm845.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sdm845.sh @@ -409,6 +409,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42143/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch @@ -418,7 +420,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p418" +editKernelLocalversion "-dos.p420" else echo "kernel_xiaomi_sdm845 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm6150.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm6150.sh index eabe6299..05beb731 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm6150.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm6150.sh @@ -419,12 +419,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p424" +editKernelLocalversion "-dos.p427" else echo "kernel_xiaomi_sm6150 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm8250.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm8250.sh index 5028fa4c..f7020844 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm8250.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_sm8250.sh @@ -303,10 +303,13 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-26720/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p306" +editKernelLocalversion "-dos.p309" else echo "kernel_xiaomi_sm8250 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_vayu.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_vayu.sh index 6673f096..33a49018 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_vayu.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_xiaomi_vayu.sh @@ -421,12 +421,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42157/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42224/4.19/0002.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.19/0003.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch -editKernelLocalversion "-dos.p426" +editKernelLocalversion "-dos.p429" else echo "kernel_xiaomi_vayu is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE" diff --git a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_zuk_msm8996.sh b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_zuk_msm8996.sh index afe64529..a5f8321b 100644 --- a/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_zuk_msm8996.sh +++ b/Scripts/LineageOS-20.0/CVE_Patchers/android_kernel_zuk_msm8996.sh @@ -498,12 +498,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42148/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42153/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42154/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42223/4.4/0008.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42232/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42236/4.4/0001.patch +git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42247/^6.10/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.4/0004.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-26145/qcacld-2.0/0008.patch --directory=drivers/staging/qcacld-2.0 git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.4/0008.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.4/0001.patch git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.4/0001.patch -editKernelLocalversion "-dos.p503" +editKernelLocalversion "-dos.p506" else echo "kernel_zuk_msm8996 is unavailable, not patching."; fi; cd "$DOS_BUILD_BASE"