Update CVE patchers

Signed-off-by: Tavi <tavi@divested.dev>
This commit is contained in:
Tavi 2024-12-02 14:51:16 -05:00
parent cef79967f6
commit b2f14a83be
No known key found for this signature in database
GPG key ID: E599F62ECBAEAF2E
26 changed files with 91 additions and 47 deletions

View file

@ -1259,6 +1259,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47222/4.14/0002.patch
@ -1266,7 +1268,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
editKernelLocalversion "-dos.p1266"
editKernelLocalversion "-dos.p1268"
else echo "kernel_xiaomi_sm6150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -1342,6 +1342,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
@ -1354,7 +1356,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p1354"
editKernelLocalversion "-dos.p1356"
else echo "kernel_xiaomi_sm8150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -557,6 +557,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -568,7 +569,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-alt/4.9/0001.patch
editKernelLocalversion "-dos.p568"
editKernelLocalversion "-dos.p569"
else echo "kernel_fairphone_sdm632 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -265,6 +265,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27430/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-31076/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33014/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33015/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33053/video-driver/0001.patch --directory=techpack/video
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33060/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-34027/^6.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35789/4.19/0002.patch
@ -636,13 +637,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53063/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p642"
editKernelLocalversion "-dos.p645"
else echo "kernel_fairphone_sm7225 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -265,6 +265,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27430/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-31076/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33014/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33015/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33053/video-driver/0001.patch --directory=techpack/video
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33060/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-34027/^6.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35789/4.19/0002.patch
@ -636,13 +637,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53063/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p642"
editKernelLocalversion "-dos.p645"
else echo "kernel_fxtec_sm6115 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -1271,6 +1271,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53060/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47195/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.10/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.10/0002.patch
@ -1283,7 +1285,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-49881/5.10/0002.patch
editKernelLocalversion "-dos.p1283"
editKernelLocalversion "-dos.p1285"
else echo "kernel_google_gs101_private_gs-google is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -1269,6 +1269,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53060/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47195/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.10/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.10/0002.patch
@ -1281,7 +1283,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.10/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.10/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-49881/5.10/0002.patch
editKernelLocalversion "-dos.p1281"
editKernelLocalversion "-dos.p1283"
else echo "kernel_google_gs201_private_gs-google is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -600,6 +600,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33063/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
@ -607,7 +609,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p607"
editKernelLocalversion "-dos.p609"
else echo "kernel_google_msm-4.14 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -564,6 +564,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -575,7 +576,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p575"
editKernelLocalversion "-dos.p576"
else echo "kernel_google_msm-4.9 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -502,6 +502,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27430/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27436/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-31076/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33014/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33053/video-driver/0001.patch --directory=techpack/video
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33060/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-34027/^6.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35789/4.19/0002.patch
@ -861,13 +862,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53060/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p867"
editKernelLocalversion "-dos.p870"
else echo "kernel_google_redbull is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -571,6 +571,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -582,7 +583,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p582"
editKernelLocalversion "-dos.p583"
else echo "kernel_oneplus_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -321,6 +321,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27436/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-31076/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33014/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33015/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33053/video-driver/0001.patch --directory=techpack/video
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33060/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-34027/^6.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35789/4.19/0002.patch
@ -690,13 +691,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53060/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p696"
editKernelLocalversion "-dos.p699"
else echo "kernel_oneplus_sm7250 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -1297,6 +1297,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-0466/4.14/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2020-24586/4.14/0003.patch
@ -1308,7 +1310,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p1308"
editKernelLocalversion "-dos.p1310"
else echo "kernel_oneplus_sm8150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -266,6 +266,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27430/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-31076/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33014/qca-wifi-host-cmn/0001.patch --directory=drivers/staging/qca-wifi-host-cmn
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33015/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33053/video-driver/0001.patch --directory=techpack/video
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33060/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-34027/^6.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35789/4.19/0002.patch
@ -637,13 +638,15 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53063/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p643"
editKernelLocalversion "-dos.p646"
else echo "kernel_oneplus_sm8250 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -785,6 +785,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/5.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53063/5.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/5.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/5.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/5.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/5.4/0005.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47195/5.4/0004.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47472/5.4/0008.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2021-47490/5.4/0003.patch
@ -797,7 +799,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/5.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/5.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/5.4/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/5.4/0005.patch
editKernelLocalversion "-dos.p797"
editKernelLocalversion "-dos.p799"
else echo "kernel_oneplus_sm8350 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -567,6 +567,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -578,7 +579,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p578"
editKernelLocalversion "-dos.p579"
else echo "kernel_razer_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -1181,6 +1181,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53045/^6.12/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-14283/4.9/0008.patch
@ -1189,7 +1190,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
editKernelLocalversion "-dos.p1189"
editKernelLocalversion "-dos.p1190"
else echo "kernel_samsung_exynos9810 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -1079,6 +1079,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-2024/4.9/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-2024/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0002-Misc_Fixes-2024/4.9/0004.patch
@ -1096,7 +1097,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p1096"
editKernelLocalversion "-dos.p1097"
else echo "kernel_sony_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -560,6 +560,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -571,7 +572,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p571"
editKernelLocalversion "-dos.p572"
else echo "kernel_xiaomi_msm8937 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -574,6 +574,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-fortify/4.9/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0016.patch
git apply $DOS_PATCHES_LINUX_CVES/0008-Graphene-Kernel_Hardening-ro/4.9/0029.patch
@ -585,7 +586,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.9/0009.patch
editKernelLocalversion "-dos.p585"
editKernelLocalversion "-dos.p586"
else echo "kernel_xiaomi_sdm845 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -637,6 +637,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33063/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
@ -644,7 +646,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p644"
editKernelLocalversion "-dos.p646"
else echo "kernel_xiaomi_sm6150 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -167,6 +167,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27399/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27401/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-31076/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33015/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33053/video-driver/0001.patch --directory=techpack/video
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-33060/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-34027/^6.9/0001.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-35812/4.19/0003.patch
@ -522,10 +523,12 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53063/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.19/0007.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-26720/4.19/0003.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.19/0002.patch
editKernelLocalversion "-dos.p525"
editKernelLocalversion "-dos.p528"
else echo "kernel_xiaomi_sm8250 is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"

View file

@ -641,6 +641,8 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53057/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53061/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53066/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53101/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53103/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-53104/4.19/0002.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2019-12819/4.14/0006.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-33063/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2023-52601/4.14/0009.patch
@ -648,7 +650,7 @@ git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27424/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-27425/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-42104/4.14/0009.patch
git apply $DOS_PATCHES_LINUX_CVES/CVE-2024-43047-upstream/4.14/0007.patch
editKernelLocalversion "-dos.p648"
editKernelLocalversion "-dos.p650"
else echo "kernel_xiaomi_vayu is unavailable, not patching.";
fi;
cd "$DOS_BUILD_BASE"