khadas / linux

Linux kernel for Khadas VIMs & Edges
https://www.khadas.com
Other
150 stars 139 forks source link

Need confirmation for some unpatched CVE in linux #104

Open the-Chain-Warden-thresh opened 1 year ago

the-Chain-Warden-thresh commented 1 year ago

I'm building up my own OS by cloning this repo. However, I've noticed that some CVEs which were confirmed and fixed by linux do not get patched in this repo. To enhance the availability of my project as far as possible, I will appreciate it if any of the CVE below do exist in this repo as well, so that I can fix these security issue myself by applying the corresponding patch. Here are the CVEs I found in this repo with branch khadas-vims-nougat unpatched, but get fixed in linux:

CVE-2016-3136, with patch here for your reference.

CVE-2020-9383, with patch here for your reference.

CVE-2017-8824, with patch here for your reference.

CVE-2019-3846, with patch here for your reference.

CVE-2020-12653, with patch here for your reference.

CVE-2020-36158, with patch here for your reference.

CVE-2016-2117, with patch here for your reference.

CVE-2016-5828, with patch here for your reference.

CVE-2018-11412, with patch here for your reference.

CVE-2018-10881, with patch here for your reference.

CVE-2020-11494, with patch here for your reference.

CVE-2015-0239, with patch here for your reference.