linux-intel: CVE-2017-11176

fix a use-after-free in sys_mq_notify()

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2017-11176

Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Signed-off-by: Adrian Dudau <adrian.dudau@enea.com>

1 files changed, 4 insertions, 1 deletions

diff --git a/recipes-kernel/linux/linux-intel.inc b/recipes-kernel/linux/linux-intel.inc
index 733a329..84fbf77 100644
--- a/recipes-kernel/linux/linux-intel.inc
+++ b/recipes-kernel/linux/linux-intel.inc
@@ -1,9 +1,12 @@
+FILESEXTRAPATHS_prepend := "${THISDIR}/linux-intel:"
 require common/recipes-kernel/linux/linux-intel_4.9.bb
 require recipes-kernel/linux/linux-deploy-kconfig.inc
 
 SRCREV_metaenea = "7579efbdb49529f36652b69d4630c6c43907f77b"
 KENEABRANCH = "intel-4.9"
-SRC_URI_append = " git://git@git.enea.com/linux/enea-kernel-cache.git;protocol=ssh;type=kmeta;name=metaenea;branch=${KENEABRANCH};destsuffix=enea-kernel-meta"
+SRC_URI_append = " git://git@git.enea.com/linux/enea-kernel-cache.git;protocol=ssh;type=kmeta;name=metaenea;branch=${KENEABRANCH};destsuffix=enea-kernel-meta \
+                   file://CVE-2017-11176.patch \
+                 "
 
 KERNEL_FEATURES_append = " features/udev/udev.scc"