X-Git-Url: https://gerrit.automotivelinux.org/gerrit/gitweb?a=blobdiff_plain;ds=sidebyside;f=meta-agl-bsp%2Fmeta-raspberrypi%2Frecipes-kernel%2Flinux%2Flinux-raspberrypi_%25.bbappend;h=6557ce03cc370830ddea68c4ced0770235ced8ed;hb=e5424687739b4182f91048e9c9514fa38f78a937;hp=8417982656110314f37ef1362be55ada854936ed;hpb=50e1176550206e4da9d9f412aeeb63ad00008e0b;p=AGL%2Fmeta-agl.git

diff --git a/meta-agl-bsp/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_%.bbappend b/meta-agl-bsp/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_%.bbappend
index 841798265..6557ce03c 100644
--- a/meta-agl-bsp/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_%.bbappend
+++ b/meta-agl-bsp/meta-raspberrypi/recipes-kernel/linux/linux-raspberrypi_%.bbappend
@@ -4,6 +4,14 @@ SRC_URI_append = "\
 	${@base_conditional('USE_FAYTECH_MONITOR', '1', 'file://0002-faytech-fix-rpi.patch', '', d)} \
 "
 
+# Fix CVE-2017-1000364
+SRC_URI_append = "\
+      file://0001-mm-larger-stack-guard-gap-between-vmas.patch \
+      file://0002-Allow-stack-to-grow-up-to-address-space-limit.patch \
+      file://0003-mm-fix-new-crash-in-unmapped_area_topdown.patch \
+"
+
+
 do_configure_append_smack() {
     # SMACK and Co
     kernel_configure_variable IP_NF_SECURITY m