There are cves based on OpenHarmony-4.19 as follows:

CVE-2021-37159
CVE-2021-35477
CVE-2021-34556

---

--------------------

Alexei Starovoitov (1):
  bpf: track spill/fill of constants

Daniel Borkmann (2):
  bpf: Introduce BPF nospec instruction for mitigating Spectre v4
  bpf: Fix leakage due to insufficient speculative store bypass
    mitigation

Dongliang Mu (1):
  usb: hso: fix error handling code of hso_create_net_device

Edward Cree (1):
  bpf/verifier: per-register parent pointers

Oliver Neukum (1):
  hso: fix bailout in error case of probe

 arch/arm/net/bpf_jit_32.c         |   3 +
 arch/arm64/net/bpf_jit_comp.c     | 13 ++
 arch/mips/net/ebpf_jit.c          |   3 +
 arch/powerpc/net/bpf_jit_comp64.c |   6 +
 arch/s390/net/bpf_jit_comp.c      |   5 +
 arch/sparc/net/bpf_jit_comp_64.c |   3 +
 arch/x86/net/bpf_jit_comp.c       |   7 +
 arch/x86/net/bpf_jit_comp32.c     |   6 +
 drivers/net/usb/hso.c             | 39 ++--
 include/linux/bpf_verifier.h      | 10 +-
 include/linux/filter.h            | 15 ++
 kernel/bpf/core.c                 | 18 +-
 kernel/bpf/disasm.c               | 16 +-
 kernel/bpf/verifier.c             | 328 ++++++++++++------------------
 14 files changed, 244 insertions(+), 228 deletions(-)

--
2.22.0