Missing latest CVE Security Fix

[scafroglia93]

Well Done Oneplus!

[jcadduono]

don't forget your dirty cows!
i rebased and made updates and fixes on my fork: https://github.com/jcadduono/android_kernel_oneplus_msm8996/commits/3T-android-6.0

not sure if it boots though :) lots of changes since sept 6th and i don't own the device, probably never will as there might be something else with a 4K screen on the horizon, i love my VR

going from OnePlus 3's history, it looks like OnePlus doesn't even bother with any kernel commits. they just grab a CAF tag and roll with it forever lol. maybe the kernel security fixes will never reach the device.

at least in nougat they'll probably need to grab another CAF tag, but it might not be any more up to date than the current one theyre using heh.

[NewEraCracker]

Why not opening PRs via https://github.com/OnePlusOSS/android_kernel_oneplus_msm8996/pulls and also informing 3rd party kernel authors about this?

There are some popular 3rd party kernels that care more about security and work well over the stock version. I am presently using one of those after doing source code audits.

[NewEraCracker]

OnePlus customers really need to exert pressure on them so the software team does their job properly.

I have submitted a few pull requests and I recommend anyone with security knowledge to actively hunt and propose fixes for security vulnerabilities.

Update: All security-related commits are now at: #16

[scafroglia93]

October 2016 WTF hahaha