update kernel to 5.10.198

hc

2024-01-03 2f7c68cb55ecb7331f2381deb497c27155f32faf

 kernel/drivers/pci/syscall.c
..
..
@@ -7,6 +7,7 @@
7
7
 
8
8
 #include <linux/errno.h>
9
9
 #include <linux/pci.h>
10
+#include <linux/security.h>
10
11
 #include <linux/syscalls.h>
11
12
 #include <linux/uaccess.h>
12
13
 #include "pci.h"
..
..
@@ -92,7 +93,8 @@
92
93
 	u32 dword;
93
94
 	int err = 0;
94
95
 
95
-	if (!capable(CAP_SYS_ADMIN))
96
+	if (!capable(CAP_SYS_ADMIN) ||
97
+	    security_locked_down(LOCKDOWN_PCI_ACCESS))
96
98
 		return -EPERM;
97
99
 
98
100
 	dev = pci_get_domain_bus_and_slot(0, bus, dfn);