
This commit updates kernel to 5.10.177 to fix following CVE issue: CVE-2022-4379: https://nvd.nist.gov/vuln/detail/CVE-2022-4379 One of our source patches requires refresh against the new kernel source. It was modified to acommodate the context changes in the new kernel: 0001-Notification-of-death-of-arbitrary-processes.patch Verification: - Build kernel and out of tree modules success for rt and std. - Build iso success for rt and std. - Install success onto a All-in-One lab with rt kernel. - Boot up successfully in the lab. - The sanity testing was run including kernel and applications by our test team. - The cyclictest benchmark was also run on the starlingx lab, the result is "samples: 259199999 avg: 1614 max: 4759 99.9999th percentile: 2572 overflows: 0", It is not big difference with 5.10.162 for avg and max, but percentile seems little lower than 5.10.162. Closes-Bug: 2015711 Change-Id: I98a92534154989446ba6eda9529cd799498ee800 Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
26 lines
616 B
Bash
Executable File
26 lines
616 B
Bash
Executable File
#!/bin/bash
|
|
|
|
# The only parameter is the name of the folder where the source code
|
|
# is extracted to. Pay attention to that the extracted package should
|
|
# be put at the same path where this script is located.
|
|
# Tools needed: tar
|
|
|
|
KERNEL_HEAD_COMMIT=cf160f367e3ceb54cde11392a80413b152ca4e15
|
|
DEBIAN_FILE=linux_5.10.28-1.debian.tar.xz
|
|
|
|
tar xvf linux-yocto-${KERNEL_HEAD_COMMIT}.tar.gz
|
|
if [ $? -ne 0 ]
|
|
then
|
|
echo "tar failed: linux-yocto source!"
|
|
exit 1
|
|
fi
|
|
mv linux-yocto-${KERNEL_HEAD_COMMIT} $1
|
|
|
|
cd $1
|
|
tar xvf ../${DEBIAN_FILE}
|
|
if [ $? -ne 0 ]
|
|
then
|
|
echo "tar failed: debian folder for kernel!"
|
|
exit 1
|
|
fi
|