
This commit updates kernel to 5.10.162 to fix many issues, including the following CVE issues. CVE-2022-3643: https://nvd.nist.gov/vuln/detail/CVE-2022-3643 CVE-2022-3524: https://nvd.nist.gov/vuln/detail/CVE-2022-3524 Our source patches do not require refresh against the new kernel source. Verification: - Build kernel and out of tree modules success for rt and std. - Build iso success for rt and std. - Install success onto a All-in-One lab with rt kernel. - Boot up successfully in the lab. - The sanity testing was run including kernel and applications by our test team. - The cyclictest benchmark was also run on the starlingx lab, the result is "samples: 259199998 avg: 1628 max: 4387 99.9999th percentile: 2996 overflows: 0", It is not big difference with 5.10.152 for avg and 99.9999th, but max value seems little higher than 5.10.152. Closes-Bug: 2002280 Signed-off-by: Jiping Ma <jiping.ma2@windriver.com> Change-Id: Ib2017625a92f51e02a41a8d14d8ba850f9c0721a
26 lines
616 B
Bash
Executable File
26 lines
616 B
Bash
Executable File
#!/bin/bash
|
|
|
|
# The only parameter is the name of the folder where the source code
|
|
# is extracted to. Pay attention to that the extracted package should
|
|
# be put at the same path where this script is located.
|
|
# Tools needed: tar
|
|
|
|
KERNEL_HEAD_COMMIT=353f388471e281c0f387436b035bfdcd2f468505
|
|
DEBIAN_FILE=linux_5.10.28-1.debian.tar.xz
|
|
|
|
tar xvf linux-yocto-${KERNEL_HEAD_COMMIT}.tar.gz
|
|
if [ $? -ne 0 ]
|
|
then
|
|
echo "tar failed: linux-yocto source!"
|
|
exit 1
|
|
fi
|
|
mv linux-yocto-${KERNEL_HEAD_COMMIT} $1
|
|
|
|
cd $1
|
|
tar xvf ../${DEBIAN_FILE}
|
|
if [ $? -ne 0 ]
|
|
then
|
|
echo "tar failed: debian folder for kernel!"
|
|
exit 1
|
|
fi
|