starlingx
/
kernel
Code Issues Proposed changes

Update kernel to v5.10.185 

This commit updates kernel to 5.10.185 to fix following CVE issues:
CVE-2023-3609: https://nvd.nist.gov/vuln/detail/CVE-2023-3609
CVE-2023-3090: https://nvd.nist.gov/vuln/detail/CVE-2023-3090
CVE-2023-3212: https://nvd.nist.gov/vuln/detail/CVE-2023-3212
CVE-2023-35788: https://nvd.nist.gov/vuln/detail/CVE-2023-35788
CVE-2023-3141: https://nvd.nist.gov/vuln/detail/CVE-2023-3141
CVE-2023-3111: https://nvd.nist.gov/vuln/detail/CVE-2023-3111
CVE-2023-2124: https://nvd.nist.gov/vuln/detail/CVE-2023-2124
CVE-2023-3338: https://nvd.nist.gov/vuln/detail/CVE-2023-3338

None of our source patches requires refresh against the new kernel
source.

Verification:
- Build kernel and out of tree modules success for rt and std.
- Build iso success for rt and std.
- Install success onto a AIO-DX lab with rt kernel.
- Boot up successfully in the lab.
- The sanity testing was run including kernel and applications
  by our test team.
- The cyclictest benchmark was also run on the starlingx lab, the
  result is "samples: 259199999 avg: 1649 max: 9363 99.9999th
  percentile: 8579 overflows: 0", It is not big difference with
  5.10.180 for avg and max.

Closes-Bug: 2025123
Change-Id: Ia4d825573e03a8c6f03a4c5f53104db5903f41ae
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
This commit is contained in:
Peng Zhang 2023-08-02 14:47:22 +08:00
parent 0ee7813d66
commit 481ad14aa4
8 changed files with 72 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
kernel-rt/debian/deb_patches/0029-Upgrade-5.10-kernel-to-5.10.185.patch Normal file
View File

@ -0,0 +1,30 @@
From f60441ca7a8184488446a66c85a2ea6f548e5000 Mon Sep 17 00:00:00 2001
From: Peng Zhang <Peng.Zhang2@windriver.com>
Date: Sat, 15 Jul 2023 07:38:21 +0000
Subject: [PATCH] Upgrade 5.10 kernel to 5.10.185
Update debian/changelog.
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
---
debian/changelog | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index 7e50db189..e41f6761d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+linux-rt (5.10.185-1) unstable; urgency=medium
+
+ * New upstream update:
+ https://git.yoctoproject.org/linux-yocto/log/?h=v5.10%2Fstandard%2Fpreempt-rt%2Fbase&qt=range&q=46fb028ad9413cfa8d47a6dc8bf9a57d9d5edf8b
+
+ -- Peng Zhang <Peng.Zhang2@windriver.com> Sat, 15 Jul 2023 07:23:36 +0000
+
linux-rt (5.10.180-1) unstable; urgency=medium
* New upstream update:
--
2.30.2

1
kernel-rt/debian/deb_patches/series
View File

@ -26,3 +26,4 @@
0026-Disable-unprivileged-eBPF-by-default.patch
0027-Upgrade-5.10-kernel-to-5.10.180.patch
0028-config-Enable-Intel-RAPL-and-uncore-frequency-contro.patch
0029-Upgrade-5.10-kernel-to-5.10.185.patch

2
kernel-rt/debian/dl_hook
View File

@ -24,7 +24,7 @@
# building.
# Tools needed: tar/sed
KERNEL_HEAD_COMMIT=288dde44f13d9c4e997737c1dfbe4d835d28868e
KERNEL_HEAD_COMMIT=46fb028ad9413cfa8d47a6dc8bf9a57d9d5edf8b
DEBIAN_FILE=linux_5.10.28-1.debian.tar.xz
tar xvf linux-yocto-${KERNEL_HEAD_COMMIT}.tar.gz

8
kernel-rt/debian/meta_data.yaml
View File

@ -1,14 +1,14 @@
---
debver: 5.10.180
debver: 5.10.185
debname: linux-rt
dl_hook: dl_hook
dl_files:
linux-yocto-288dde44f13d9c4e997737c1dfbe4d835d28868e.tar.gz:
linux-yocto-46fb028ad9413cfa8d47a6dc8bf9a57d9d5edf8b.tar.gz:
topdir: null
url:
"https://git.yoctoproject.org/linux-yocto/snapshot/\
linux-yocto-288dde44f13d9c4e997737c1dfbe4d835d28868e.tar.gz"
sha256sum: 3fbf9669adf06002f6febc4edc9087eaba2b284ec84c20896365d74529696951
linux-yocto-46fb028ad9413cfa8d47a6dc8bf9a57d9d5edf8b.tar.gz"
sha256sum: 89666dd1d47e3779ea7db880606335618e1217fe8ef78fc95fa9db7f20770a82
linux_5.10.28-1.debian.tar.xz:
topdir: null
url:

30
kernel-std/debian/deb_patches/0028-Upgrade-5.10-kernel-to-5.10.185.patch Normal file
View File

@ -0,0 +1,30 @@
From dc55edc65f258d19a8cc18fd340d3d09bc2fbd93 Mon Sep 17 00:00:00 2001
From: Peng Zhang <Peng.Zhang2@windriver.com>
Date: Mon, 17 Jul 2023 10:51:43 +0000
Subject: [PATCH] Upgrade 5.10 kernel to 5.10.185
Update debian/changelog.
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
---
debian/changelog | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/debian/changelog b/debian/changelog
index b00c04943..c9a526a23 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+linux (5.10.185-1) unstable; urgency=medium
+
+ * New upstream update:
+ https://git.yoctoproject.org/linux-yocto/log/?h=v5.10%2Fstandard%2Fbase&qt=range&q=dafc025b033585311d1693255c80b60b690b0e54
+
+ -- Peng Zhang <Peng.Zhang2@windriver.com> Mon, 17 Jul 2023 10:47:53 +0000
+
linux (5.10.180-1) unstable; urgency=medium
* New upstream update:
--
2.30.2

1
kernel-std/debian/deb_patches/series
View File

@ -25,3 +25,4 @@
0025-Disable-unprivileged-eBPF-by-default.patch
0026-Upgrade-5.10-kernel-to-5.10.180.patch
0027-config-Enable-Intel-RAPL-and-uncore-frequency-contro.patch
0028-Upgrade-5.10-kernel-to-5.10.185.patch

2
kernel-std/debian/dl_hook
View File

@ -5,7 +5,7 @@
# be put at the same path where this script is located.
# Tools needed: tar
KERNEL_HEAD_COMMIT=c6515d2a698792220bed8fd39ccbcfec64d1130f
KERNEL_HEAD_COMMIT=dafc025b033585311d1693255c80b60b690b0e54
DEBIAN_FILE=linux_5.10.28-1.debian.tar.xz
tar xvf linux-yocto-${KERNEL_HEAD_COMMIT}.tar.gz

8
kernel-std/debian/meta_data.yaml
View File

@ -1,14 +1,14 @@
---
debver: 5.10.180
debver: 5.10.185
debname: linux
dl_hook: dl_hook
dl_files:
linux-yocto-c6515d2a698792220bed8fd39ccbcfec64d1130f.tar.gz:
linux-yocto-dafc025b033585311d1693255c80b60b690b0e54.tar.gz:
topdir: null
url:
"https://git.yoctoproject.org/linux-yocto/snapshot/\
linux-yocto-c6515d2a698792220bed8fd39ccbcfec64d1130f.tar.gz"
sha256sum: d4e8a5d0b7ffffcf1c3f5c4e7d7132419bbf7a5d98c38e0d07bae5b8d56195d3
linux-yocto-dafc025b033585311d1693255c80b60b690b0e54.tar.gz"
sha256sum: f84d3300ca76f11f1f7607f8445704442a850163473fd2058a0f60e27f55e365
linux_5.10.28-1.debian.tar.xz:
topdir: null
url: