https://source.android.com/docs/security/bulletin/2022-10-01
CVE-2022-1786
CVE-2022-20421
CVE-2022-20422
CVE-2022-20423
CVE-2022-20409

1. 7378930 ANDROID: restore some removed refcount functions by Greg Kroah-Hartman · 1 year, 11 months ago
2. 9697c71 Merge 5.4.208 into android12-5.4-lts by Greg Kroah-Hartman · 1 year, 11 months ago
3. d0d5834 locking/refcount: Consolidate implementations of refcount_t by Will Deacon · 4 years, 7 months ago
4. 0d3182f locking/refcount: Move saturation warnings out of line by Will Deacon · 4 years, 7 months ago
5. 9c92699 locking/refcount: Move the bulk of the REFCOUNT_FULL implementation into the <linux/refcount.h> header by Will Deacon · 4 years, 7 months ago
6. 04bff7d locking/refcount: Remove unused refcount_*_checked() variants by Will Deacon · 4 years, 7 months ago
7. 513b19a locking/refcount: Ensure integer operands are treated as signed by Will Deacon · 4 years, 7 months ago
8. 68b4ee6 locking/refcount: Define constants for saturation and max refcount values by Will Deacon · 4 years, 7 months ago
9. ad10866 Merge 5.4.205 into android12-5.4-lts by Greg Kroah-Hartman · 2 years ago
10. 5af3f2a6 ida: don't use BUG_ON() for debugging by Linus Torvalds · 2 years ago
11. ddb9bf3 Merge 5.4.200 into android12-5.4-lts by Greg Kroah-Hartman · 2 years ago
12. 3266fba random: remove ratelimiting for in-kernel unseeded randomness by Jason A. Donenfeld · 2 years, 2 months ago
13. 55d64df siphash: use one source of truth for siphash permutations by Jason A. Donenfeld · 2 years, 2 months ago
14. 6315030 random: replace custom notifier chain with standard one by Jason A. Donenfeld · 2 years, 4 months ago
15. 776927d random: remove unused tracepoints by Jason A. Donenfeld · 2 years, 5 months ago
16. 996fba1 lib/crypto: sha1: re-roll loops to reduce code size by Jason A. Donenfeld · 2 years, 6 months ago
17. c4f4837 lib/crypto: blake2s: move hmac construction into wireguard by Jason A. Donenfeld · 2 years, 6 months ago
18. 97126d2 crypto: blake2s - generic C library implementation and selftest by Jason A. Donenfeld · 4 years, 8 months ago
19. aa4a107 Merge 5.4.198 into android12-5.4-lts by Greg Kroah-Hartman · 2 years ago
20. a3f9b0a nodemask: Fix return values to be unsigned by Kees Cook · 2 years, 1 month ago
21. 517dc29 Merge 5.4.197 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 1 month ago android12-5.4.197_r00
22. 039fa25 assoc_array: Fix BUG_ON during garbage collect by Stephen Brennan · 2 years, 1 month ago
23. 31f4634 Merge 5.4.195 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 1 month ago
24. 0a778db dim: initialize all struct fields by Jesse Brandeburg · 2 years, 2 months ago
25. 409a80c ANDROID: GKI: update the abi .xml file due to hex_to_bin() changes by Greg Kroah-Hartman · 2 years, 2 months ago
26. 34002e5 Merge 5.4.192 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 2 months ago
27. c00f389 hex2bin: fix access beyond string end by Mikulas Patocka · 2 years, 2 months ago
28. 15b78a8 hex2bin: make the function hex_to_bin constant-time by Mikulas Patocka · 2 years, 2 months ago
29. 69c7c4b Merge 5.4.189 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 2 months ago
30. 73953df lz4: fix LZ4_decompress_safe_partial read out of bound by Guo Xuenan · 2 years, 3 months ago
31. 9a88359 XArray: Update the LRU list in xas_split() by Matthew Wilcox (Oracle) · 2 years, 3 months ago
32. 3e2852e XArray: Fix xas_create_range() when multi-order entry present by Matthew Wilcox (Oracle) · 2 years, 3 months ago
33. 7a7b11d lib/raid6/test/Makefile: Use $(pound) instead of \# for Make 4.3 by Paul Menzel · 2 years, 5 months ago
34. 1f316b4 lib/test: use after free in register_test_dev_kmod() by Dan Carpenter · 2 years, 3 months ago
35. 0022888 lib/raid6/test: fix multiple definition linking error by Dirk Müller · 2 years, 5 months ago
36. 49b41d6 Merge 5.4.186 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 3 months ago
37. 4006447 ARM: 9178/1: fix unmet dependency on BITREVERSE for HAVE_ARCH_BITREVERSE by Julian Braha · 2 years, 5 months ago
38. a980349a Merge 5.4.181 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 4 months ago
39. 87c575d lib/iov_iter: initialize "flags" in new pipe_buffer by Max Kellermann · 2 years, 4 months ago
40. 5dccbf0 Merge 5.4.174 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 5 months ago
41. 0c1b203 lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test by Andrey Konovalov · 2 years, 5 months ago
42. ef086bd Merge 5.4.164 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 7 months ago
43. af120fc siphash: use _unaligned version by default by Arnd Bergmann · 2 years, 7 months ago
44. a88a069 Merge 5.4.160 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 7 months ago
45. 58b4e0c lib/xz: Validate the value before assigning it to an enum variable by Lasse Collin · 2 years, 9 months ago
46. 8cdab20 lib/xz: Avoid overlapping memcpy() with invalid input with in-place decompression by Lasse Collin · 2 years, 9 months ago
47. 2efb81b iov_iter: Fix iov_iter_get_pages{,_alloc} page fault return value by Andreas Gruenbacher · 3 years ago
48. 8fb7ebe Merge 5.4.149 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 9 months ago
49. c7b9a86 Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH by Lukas Bulwahn · 2 years, 10 months ago
50. 04da0ff Merge 5.4.148 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 9 months ago
51. c1f12f4 lib/test_stackinit: Fix static initializer test by Kees Cook · 3 years ago
52. 9dff06c bpf/tests: Do not PASS tests without actually testing the result by Johan Almbladh · 3 years ago
53. 5883131 bpf/tests: Fix copy-and-paste error in double word test by Johan Almbladh · 3 years ago
54. dbb65264 Merge 5.4.146 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 10 months ago
55. 6b10d3d lib/mpi: use kcalloc in mpi_resize by Hongbo Li · 2 years, 11 months ago
56. 17c1ddf Revert "once: Fix panic when module unload" by Greg Kroah-Hartman · 2 years, 10 months ago
57. 1beb5af Merge 5.4.144 into android12-5.4-lts by Greg Kroah-Hartman · 2 years, 10 months ago
58. 57bd5b5 once: Fix panic when module unload by Kefeng Wang · 2 years, 11 months ago
59. 27c5dbd Merge 5.4.134 into android12-5.4-lts by Greg Kroah-Hartman · 3 years ago
60. 13b51d9 lib/decompress_unlz4.c: correctly handle zero-padding around initrds. by Dimitri John Ledkov · 3 years ago
61. 1e123b6 Merge 5.4.133 into android12-5.4-lts by Greg Kroah-Hartman · 3 years ago
62. 33ab913 seq_buf: Fix overflow in seq_buf_putmem_hex() by Yun Zhou · 3 years ago
63. 35e491a Merge 5.4.132 into android12-5.4-lts by Greg Kroah-Hartman · 3 years ago
64. e846c28 lib: vsprintf: Fix handling of number field widths in vsscanf by Richard Fitzgerald · 3 years, 1 month ago
65. 9ed57fc seq_buf: Make trace_seq_putmem_hex() support data longer than 8 by Yun Zhou · 3 years ago
66. 63e68b5 iov_iter_fault_in_readable() should do nothing in xarray case by Al Viro · 3 years, 1 month ago
67. 846ae1d copy_page_to_iter(): fix ITER_DISCARD case by Al Viro · 3 years, 2 months ago
68. fa0f93a FROMLIST: bootconfig: Support mixing a value and subkeys under a key by Masami Hiramatsu · 3 years, 1 month ago
69. cbaf383 FROMLIST: bootconfig: Change array value to use child node by Masami Hiramatsu · 3 years, 1 month ago
70. fc15be4 UPSTREAM: lib/bootconfig: Add override operator support by Masami Hiramatsu · 4 years ago
71. 297cdb2 UPSTREAM: crypto: poly1305 - fix poly1305_core_setkey() declaration by Arnd Bergmann · 3 years, 3 months ago
72. 6c11534 UPSTREAM: lib/bootconfig: Fix to remove tailing spaces after value by Masami Hiramatsu · 3 years, 9 months ago
73. 8ea6c52 UPSTREAM: lib/bootconfig: Fix a bug of breaking existing tree nodes by Masami Hiramatsu · 3 years, 9 months ago
74. 9eb500f UPSTREAM: ubsan: entirely disable alignment checks under UBSAN_TRAP by Kees Cook · 4 years, 1 month ago
75. f12db78 UPSTREAM: ubsan: disable UBSAN_ALIGNMENT under COMPILE_TEST by Kees Cook · 4 years, 2 months ago
76. 6cb0d5e Merge 5.4.125 into android12-5.4 by Greg Kroah-Hartman · 3 years, 1 month ago
77. defcc2b lib/lz4: explicitly support in-place decompression by Gao Xiang · 3 years, 6 months ago
78. 0a890e2 XArray: add xas_split by Matthew Wilcox (Oracle) · 3 years, 1 month ago
79. 03a390d XArray: add xa_get_order by Matthew Wilcox (Oracle) · 3 years, 1 month ago
80. c6775ce Merge 5.4.121 into android12-5.4 by Greg Kroah-Hartman · 3 years, 1 month ago
81. 94600a8 lib: stackdepot: turn depot_lock spinlock to raw_spinlock by Zqiang · 3 years, 2 months ago
82. 6a7ddee Merge 5.4.120 into android12-5.4 by Greg Kroah-Hartman · 3 years, 1 month ago
83. fb80624 kobject_uevent: remove warning in init_uevent_argv() by Greg Kroah-Hartman · 3 years, 3 months ago
84. 2f9f92e net: fix nla_strcmp to handle more then one trailing null character by Maciej Żenczykowski · 3 years, 2 months ago
85. ff4fa31 Merge 5.4.119 into android12-5.4 by Greg Kroah-Hartman · 3 years, 1 month ago
86. efb0f45 bug: Remove redundant condition check in report_bug by Andrew Scull · 3 years, 3 months ago
87. 9304f4c Merge 5.4.117 into android12-5.4 by Greg Kroah-Hartman · 3 years, 2 months ago
88. c7166a5 avoid __memcat_p link failure by Arnd Bergmann · 3 years, 2 months ago
89. dfece79 ANDROID: fix GENERIC_GETTIMEOFDAY dependency warning by Carlos Llamas · 3 years, 2 months ago
90. b4d6867 FROMGIT: kfence: await for allocation using wait_event by Marco Elver · 3 years, 2 months ago
91. 3941336 Merge 5.4.106 into android12-5.4 by Greg Kroah-Hartman · 3 years, 3 months ago
92. f954030 PCI: Fix pci_register_io_range() memory leak by Geert Uytterhoeven · 3 years, 5 months ago
93. b5ee1be UPSTREAM: ubsan: include bug type in report header by Kees Cook · 4 years, 3 months ago
94. 19a54cb UPSTREAM: ubsan: check panic_on_warn by Kees Cook · 4 years, 3 months ago
95. 815a7fc BACKPORT: ubsan: split "bounds" checker from other options by Elena Petrova · 3 years, 5 months ago
96. ca64f4d UPSTREAM: ubsan: add trap instrumentation option by Kees Cook · 4 years, 3 months ago
97. 1a7822e UPSTREAM: lib/vsprintf: no_hash_pointers prints all addresses as unhashed by Timur Tabi · 3 years, 4 months ago
98. b4397fc UPSTREAM: lib: use KSTM_MODULE_GLOBALS macro in kselftest drivers by Timur Tabi · 3 years, 4 months ago
99. 615318d UPSTREAM: crypto: blake2s - move update and final logic to internal/blake2s.h by Eric Biggers · 3 years, 6 months ago
100. 874804e UPSTREAM: crypto: lib/blake2s - Move selftest prototype into header file by Herbert Xu · 3 years, 7 months ago