diff mbox series

[10/16] linux-yocto/6.12: update CVE exclusions (6.12.57)

Message ID 4916c7f06055be6b0492ff4c8e604dc504705432.1764822465.git.bruce.ashfield@gmail.com
State New
Headers show
Series [01/16] linux-yocto/6.17: fix -tiny kernel boot | expand

Commit Message

Bruce Ashfield Dec. 4, 2025, 4:30 a.m. UTC 
From: Bruce Ashfield <bruce.ashfield@gmail.com>

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 4 changes (1 new | 3 updated): - 1 new CVEs: CVE-2025-8558 - 3 updated CVEs: CVE-2014-5406, CVE-2023-7312, CVE-2025-50363
        Date: Mon, 3 Nov 2025 18:44:24 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
 .../linux/cve-exclusion_6.12.inc              | 194 ++++++++++++++++--
 1 file changed, 180 insertions(+), 14 deletions(-)
diff mbox series

Patch

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index 1e596c11b7f..b35fb07d314 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,11 +1,11 @@ 
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2025-10-28 03:21:45.408892+00:00 for kernel version 6.12.55
-# From linux_kernel_cves cve_2025-10-28_0200Z-1-g573c9628fcf
+# Generated at 2025-11-03 18:50:12.770797+00:00 for kernel version 6.12.57
+# From linux_kernel_cves cve_2025-11-03_1800Z-3-g832f00439f0
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.55"
+    this_version = "6.12.57"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -6806,8 +6806,6 @@  CVE_STATUS[CVE-2023-53291] = "fixed-version: Fixed from version 6.5"
 
 CVE_STATUS[CVE-2023-53292] = "fixed-version: Fixed from version 6.5"
 
-CVE_STATUS[CVE-2023-53293] = "fixed-version: Fixed from version 6.4"
-
 CVE_STATUS[CVE-2023-53294] = "fixed-version: Fixed from version 6.4"
 
 CVE_STATUS[CVE-2023-53295] = "fixed-version: Fixed from version 6.3"
@@ -7676,6 +7674,8 @@  CVE_STATUS[CVE-2023-53732] = "fixed-version: Fixed from version 6.4"
 
 CVE_STATUS[CVE-2023-53733] = "fixed-version: Fixed from version 6.5"
 
+CVE_STATUS[CVE-2023-7324] = "fixed-version: Fixed from version 6.3"
+
 CVE_STATUS[CVE-2024-26581] = "fixed-version: Fixed from version 6.8"
 
 CVE_STATUS[CVE-2024-26582] = "fixed-version: Fixed from version 6.8"
@@ -13644,7 +13644,7 @@  CVE_STATUS[CVE-2024-57993] = "cpe-stable-backport: Backported in 6.12.13"
 
 CVE_STATUS[CVE-2024-57994] = "cpe-stable-backport: Backported in 6.12.13"
 
-# CVE-2024-57995 needs backporting (fixed from 6.14)
+CVE_STATUS[CVE-2024-57995] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2024-57996] = "cpe-stable-backport: Backported in 6.12.13"
 
@@ -14206,7 +14206,7 @@  CVE_STATUS[CVE-2025-21831] = "cpe-stable-backport: Backported in 6.12.14"
 
 CVE_STATUS[CVE-2025-21832] = "cpe-stable-backport: Backported in 6.12.14"
 
-# CVE-2025-21833 needs backporting (fixed from 6.14)
+CVE_STATUS[CVE-2025-21833] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2025-21834] = "cpe-stable-backport: Backported in 6.12.14"
 
@@ -14746,7 +14746,7 @@  CVE_STATUS[CVE-2025-22103] = "cpe-stable-backport: Backported in 6.12.46"
 
 # CVE-2025-22104 needs backporting (fixed from 6.15)
 
-# CVE-2025-22105 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-22105] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2025-22106] = "cpe-stable-backport: Backported in 6.12.49"
 
@@ -14796,7 +14796,7 @@  CVE_STATUS[CVE-2025-22128] = "cpe-stable-backport: Backported in 6.12.35"
 
 # CVE-2025-23129 needs backporting (fixed from 6.15)
 
-# CVE-2025-23130 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-23130] = "cpe-stable-backport: Backported in 6.12.57"
 
 # CVE-2025-23131 needs backporting (fixed from 6.15)
 
@@ -14986,7 +14986,7 @@  CVE_STATUS[CVE-2025-37801] = "cpe-stable-backport: Backported in 6.12.26"
 
 CVE_STATUS[CVE-2025-37802] = "cpe-stable-backport: Backported in 6.12.26"
 
-# CVE-2025-37803 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-37803] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2025-37805] = "cpe-stable-backport: Backported in 6.12.26"
 
@@ -15094,7 +15094,7 @@  CVE_STATUS[CVE-2025-37858] = "cpe-stable-backport: Backported in 6.12.24"
 
 CVE_STATUS[CVE-2025-37859] = "cpe-stable-backport: Backported in 6.12.24"
 
-# CVE-2025-37860 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-37860] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2025-37861] = "cpe-stable-backport: Backported in 6.12.24"
 
@@ -16640,7 +16640,7 @@  CVE_STATUS[CVE-2025-38641] = "fixed-version: only affects 6.16 onwards"
 
 CVE_STATUS[CVE-2025-38642] = "fixed-version: only affects 6.13 onwards"
 
-# CVE-2025-38643 needs backporting (fixed from 6.17)
+CVE_STATUS[CVE-2025-38643] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2025-38644] = "cpe-stable-backport: Backported in 6.12.42"
 
@@ -16840,7 +16840,7 @@  CVE_STATUS[CVE-2025-39676] = "cpe-stable-backport: Backported in 6.12.44"
 
 # CVE-2025-39677 needs backporting (fixed from 6.17)
 
-# CVE-2025-39678 needs backporting (fixed from 6.17)
+CVE_STATUS[CVE-2025-39678] = "cpe-stable-backport: Backported in 6.12.56"
 
 CVE_STATUS[CVE-2025-39679] = "cpe-stable-backport: Backported in 6.12.44"
 
@@ -17504,7 +17504,7 @@  CVE_STATUS[CVE-2025-40012] = "cpe-stable-backport: Backported in 6.12.50"
 
 CVE_STATUS[CVE-2025-40013] = "cpe-stable-backport: Backported in 6.12.51"
 
-# CVE-2025-40014 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-40014] = "fixed-version: only affects 6.14 onwards"
 
 CVE_STATUS[CVE-2025-40015] = "fixed-version: only affects 6.15 onwards"
 
@@ -17526,6 +17526,172 @@  CVE_STATUS[CVE-2025-40023] = "fixed-version: only affects 6.16 onwards"
 
 CVE_STATUS[CVE-2025-40024] = "cpe-stable-backport: Backported in 6.12.50"
 
+# CVE-2025-40025 needs backporting (fixed from 6.18rc1)
+
+CVE_STATUS[CVE-2025-40026] = "cpe-stable-backport: Backported in 6.12.52"
+
+CVE_STATUS[CVE-2025-40027] = "cpe-stable-backport: Backported in 6.12.52"
+
+CVE_STATUS[CVE-2025-40028] = "cpe-stable-backport: Backported in 6.12.52"
+
+CVE_STATUS[CVE-2025-40029] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40030] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40031] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40032] = "cpe-stable-backport: Backported in 6.12.54"
+
+CVE_STATUS[CVE-2025-40033] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40034] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-40035] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40036] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40037] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40038] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40039] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40040] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40041] = "fixed-version: only affects 6.17 onwards"
+
+CVE_STATUS[CVE-2025-40042] = "cpe-stable-backport: Backported in 6.12.54"
+
+CVE_STATUS[CVE-2025-40043] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40044] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40045] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40046] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-40047] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40048] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40049] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40050] = "fixed-version: only affects 6.17 onwards"
+
+CVE_STATUS[CVE-2025-40051] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40052] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40053] = "cpe-stable-backport: Backported in 6.12.53"
+
+# CVE-2025-40054 needs backporting (fixed from 6.18rc1)
+
+CVE_STATUS[CVE-2025-40055] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40056] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40057] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40058] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40059] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40060] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40061] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40062] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40063] = "fixed-version: only affects 6.16 onwards"
+
+# CVE-2025-40064 needs backporting (fixed from 6.18rc1)
+
+# CVE-2025-40065 needs backporting (fixed from 6.18rc1)
+
+CVE_STATUS[CVE-2025-40066] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-40067] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40068] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40069] = "fixed-version: only affects 6.17 onwards"
+
+CVE_STATUS[CVE-2025-40070] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40071] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40072] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-40073] = "fixed-version: only affects 6.16 onwards"
+
+# CVE-2025-40074 needs backporting (fixed from 6.18rc1)
+
+# CVE-2025-40075 needs backporting (fixed from 6.18rc1)
+
+CVE_STATUS[CVE-2025-40076] = "fixed-version: only affects 6.17 onwards"
+
+# CVE-2025-40077 needs backporting (fixed from 6.18rc1)
+
+CVE_STATUS[CVE-2025-40078] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40079] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40080] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40081] = "cpe-stable-backport: Backported in 6.12.53"
+
+CVE_STATUS[CVE-2025-40082] = "fixed-version: only affects 6.17 onwards"
+
+CVE_STATUS[CVE-2025-40083] = "cpe-stable-backport: Backported in 6.12.57"
+
+CVE_STATUS[CVE-2025-40084] = "cpe-stable-backport: Backported in 6.12.56"
+
+CVE_STATUS[CVE-2025-40085] = "cpe-stable-backport: Backported in 6.12.55"
+
+# CVE-2025-40086 needs backporting (fixed from 6.18rc2)
+
+CVE_STATUS[CVE-2025-40087] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40088] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40089] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-40090] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40091] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-40092] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40093] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40094] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40095] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40096] = "cpe-stable-backport: Backported in 6.12.55"
+
+# CVE-2025-40097 needs backporting (fixed from 6.18rc2)
+
+# CVE-2025-40098 needs backporting (fixed from 6.18rc2)
+
+CVE_STATUS[CVE-2025-40099] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40100] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40101] = "cpe-stable-backport: Backported in 6.12.55"
+
+# CVE-2025-40102 needs backporting (fixed from 6.18rc2)
+
+CVE_STATUS[CVE-2025-40103] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40104] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40105] = "cpe-stable-backport: Backported in 6.12.55"
+
+CVE_STATUS[CVE-2025-40106] = "cpe-stable-backport: Backported in 6.12.56"
+
+CVE_STATUS[CVE-2025-40107] = "cpe-stable-backport: Backported in 6.12.52"
+
 CVE_STATUS[CVE-2025-40114] = "cpe-stable-backport: Backported in 6.12.23"
 
 CVE_STATUS[CVE-2025-40300] = "cpe-stable-backport: Backported in 6.12.47"