diff mbox series

[4/4] linux-yocto/6.12: update CVE exclusions (6.12.49)

Message ID 20250929185930.1689034-4-bruce.ashfield@gmail.com
State Accepted, archived
Commit 13acb9570660dde8f1cccb045981b646acb44aea
Headers show
Series [1/4] linux-yocto/6.16: update to v6.16.9 | expand

Commit Message

Bruce Ashfield Sept. 29, 2025, 6:59 p.m. UTC 
From: Bruce Ashfield <bruce.ashfield@gmail.com>

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 1 changes (1 new | 0 updated): - 1 new CVEs: CVE-2025-11135 - 0 updated CVEs:
        Date: Mon, 29 Sep 2025 01:40:51 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
 .../linux/cve-exclusion_6.12.inc              | 64 ++++++++++++++++---
 1 file changed, 56 insertions(+), 8 deletions(-)
diff mbox series

Patch

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index 74d9e2867d..6c327e489a 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,11 +1,11 @@ 
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2025-09-22 03:24:27.411969+00:00 for kernel version 6.12.48
-# From linux_kernel_cves cve_2025-09-22_0200Z-2-gd662e5ed470
+# Generated at 2025-09-29 01:53:40.204255+00:00 for kernel version 6.12.49
+# From linux_kernel_cves cve_2025-09-29_0100Z
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.48"
+    this_version = "6.12.49"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -4984,8 +4984,6 @@  CVE_STATUS[CVE-2022-50401] = "fixed-version: Fixed from version 6.2"
 
 CVE_STATUS[CVE-2022-50402] = "fixed-version: Fixed from version 6.2"
 
-CVE_STATUS[CVE-2022-50403] = "fixed-version: Fixed from version 6.2"
-
 CVE_STATUS[CVE-2022-50404] = "fixed-version: Fixed from version 6.2"
 
 CVE_STATUS[CVE-2022-50405] = "fixed-version: Fixed from version 6.2"
@@ -12944,6 +12942,8 @@  CVE_STATUS[CVE-2024-58239] = "fixed-version: Fixed from version 6.8"
 
 CVE_STATUS[CVE-2024-58240] = "fixed-version: Fixed from version 6.8"
 
+CVE_STATUS[CVE-2024-58241] = "fixed-version: Fixed from version 6.12"
+
 CVE_STATUS[CVE-2025-21629] = "cpe-stable-backport: Backported in 6.12.9"
 
 CVE_STATUS[CVE-2025-21631] = "cpe-stable-backport: Backported in 6.12.10"
@@ -13878,7 +13878,7 @@  CVE_STATUS[CVE-2025-22103] = "cpe-stable-backport: Backported in 6.12.46"
 
 # CVE-2025-22105 needs backporting (fixed from 6.15)
 
-# CVE-2025-22106 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-22106] = "cpe-stable-backport: Backported in 6.12.49"
 
 # CVE-2025-22107 needs backporting (fixed from 6.15)
 
@@ -15134,7 +15134,7 @@  CVE_STATUS[CVE-2025-38320] = "cpe-stable-backport: Backported in 6.12.35"
 
 CVE_STATUS[CVE-2025-38321] = "cpe-stable-backport: Backported in 6.12.35"
 
-# CVE-2025-38322 needs backporting (fixed from 6.16)
+CVE_STATUS[CVE-2025-38322] = "cpe-stable-backport: Backported in 6.12.49"
 
 CVE_STATUS[CVE-2025-38323] = "cpe-stable-backport: Backported in 6.12.35"
 
@@ -16246,7 +16246,7 @@  CVE_STATUS[CVE-2025-39814] = "fixed-version: only affects 6.16 onwards"
 
 CVE_STATUS[CVE-2025-39815] = "cpe-stable-backport: Backported in 6.12.45"
 
-# CVE-2025-39816 needs backporting (fixed from 6.17rc4)
+CVE_STATUS[CVE-2025-39816] = "cpe-stable-backport: Backported in 6.12.49"
 
 CVE_STATUS[CVE-2025-39817] = "cpe-stable-backport: Backported in 6.12.45"
 
@@ -16348,6 +16348,54 @@  CVE_STATUS[CVE-2025-39865] = "cpe-stable-backport: Backported in 6.12.46"
 
 CVE_STATUS[CVE-2025-39866] = "cpe-stable-backport: Backported in 6.12.46"
 
+CVE_STATUS[CVE-2025-39867] = "fixed-version: only affects 6.17rc1 onwards"
+
+CVE_STATUS[CVE-2025-39868] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-39869] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39870] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39871] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39872] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-39873] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39874] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-39875] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-39876] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39877] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39878] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-39879] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-39880] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39881] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39882] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39883] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39884] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39885] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39886] = "cpe-stable-backport: Backported in 6.12.48"
+
+CVE_STATUS[CVE-2025-39887] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-39888] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-39889] = "cpe-stable-backport: Backported in 6.12.25"
+
+CVE_STATUS[CVE-2025-39890] = "cpe-stable-backport: Backported in 6.12.34"
+
 CVE_STATUS[CVE-2025-39930] = "fixed-version: only affects 6.14 onwards"
 
 CVE_STATUS[CVE-2025-39989] = "cpe-stable-backport: Backported in 6.12.23"