
This commit updates kernel to 5.10.112 to fix many issues, including the following two CVE issues which were of special concern. - CVE-2022-0847: kernel: improper initialization of the "flags" member of the new pipe_buffer - CVE-2022-0435: kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS Note we add more one commit https://git.yoctoproject.org/linux-yocto/commit/net/ipv4/inet_hashtables.c?h=v5.10/standard/preempt-rt/base&id=bd6e7290bc766ef13e42a1e37f75e6e708b4e317 a minor fix-up on top of v5.10.112 for rt kernel. Verification: - Build kernel and out of tree modules success for rt and std. - Build iso success for rt and std. - Install success onto a All-in-One lab with iso. - Boot up successfully with qemu and lab. Partial-Bug: 1969605 Signed-off-by: Jiping Ma <jiping.ma2@windriver.com> Change-Id: I9b126d1870cc1d14cb2dde4035d3fc73d8bc923b
34 lines
1.1 KiB
Diff
34 lines
1.1 KiB
Diff
From 1cec1b6f24812ef23b9d6f7b489c1b67e5e99a7b Mon Sep 17 00:00:00 2001
|
|
From: Jiping Ma <jiping.ma2@windriver.com>
|
|
Date: Tue, 26 Apr 2022 20:23:50 -0700
|
|
Subject: [PATCH] Debian: update 5.10 Kernel to 5.10.112
|
|
|
|
Update debian/changelog.
|
|
|
|
Signed-off-by: Jiping Ma <jiping.ma2@windriver.com>
|
|
---
|
|
debian/changelog | 10 ++++++++++
|
|
1 file changed, 10 insertions(+)
|
|
|
|
diff --git a/debian/changelog b/debian/changelog
|
|
index 5a2b6bb..9c7a271 100644
|
|
--- a/debian/changelog
|
|
+++ b/debian/changelog
|
|
@@ -1,3 +1,13 @@
|
|
+linux (5.10.112-1) unstable; urgency=medium
|
|
+
|
|
+ * New upstream update:
|
|
+ https://git.yoctoproject.org/cgit/cgit.cgi/linux-yocto/log/?h=v5.10%2Fstandard%2Fbase&qt=range&q=6cf7dea05bd756513cf58c5ced8c6bf1d1f23c15
|
|
+ * To fix the follow 2 CVE issues.
|
|
+ CVE-2022-0435: kernel: remote stack overflow via kernel panic on systems using TIPC may lead to DoS
|
|
+ CVE-2022-0847: kernel: improper initialization of the "flags" member of the new pipe_buffer
|
|
+
|
|
+ -- Jiping Ma <jiping.ma2@windriver.com> Wed Apr 27 11:13:32 CST 2022
|
|
+
|
|
linux (5.10.99-1) unstable; urgency=medium
|
|
|
|
* New upstream update:
|
|
--
|
|
2.35.1
|
|
|