diff mbox series

[06/16] linux-yocto/6.17: update CVE exclusions (6.17.8)

Message ID b2ade059f752afcd313cabf4ecb055e9991392ab.1764822465.git.bruce.ashfield@gmail.com
State New
Headers show
Series [01/16] linux-yocto/6.17: fix -tiny kernel boot | expand

Commit Message

Bruce Ashfield Dec. 4, 2025, 4:30 a.m. UTC 
From: Bruce Ashfield <bruce.ashfield@gmail.com>

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 4 changes (2 new | 2 updated): - 2 new CVEs: CVE-2024-44630, CVE-2025-64446 - 2 updated CVEs: CVE-2024-11920, CVE-2024-7021
        Date: Fri, 14 Nov 2025 15:57:02 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
 .../linux/cve-exclusion_6.17.inc              | 204 +++++++++++++++++-
 1 file changed, 201 insertions(+), 3 deletions(-)
diff mbox series

Patch

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.17.inc b/meta/recipes-kernel/linux/cve-exclusion_6.17.inc
index f60050d6470..10dc5930194 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.17.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.17.inc
@@ -1,11 +1,11 @@ 
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2025-11-04 13:42:54.522185+00:00 for kernel version 6.17.7
-# From linux_kernel_cves cve_2025-11-04_1300Z-2-geaff4df6d09
+# Generated at 2025-11-14 16:03:48.166784+00:00 for kernel version 6.17.8
+# From linux_kernel_cves cve_2025-11-14_1500Z-6-g27598c15037
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.17.7"
+    this_version = "6.17.8"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -17692,8 +17692,206 @@  CVE_STATUS[CVE-2025-40106] = "cpe-stable-backport: Backported in 6.17.6"
 
 CVE_STATUS[CVE-2025-40107] = "fixed-version: Fixed from version 6.17"
 
+CVE_STATUS[CVE-2025-40108] = "cpe-stable-backport: Backported in 6.17.2"
+
+CVE_STATUS[CVE-2025-40109] = "cpe-stable-backport: Backported in 6.17.2"
+
+CVE_STATUS[CVE-2025-40110] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40111] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40112] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40113] = "cpe-stable-backport: Backported in 6.17.3"
+
 CVE_STATUS[CVE-2025-40114] = "fixed-version: Fixed from version 6.15"
 
+CVE_STATUS[CVE-2025-40115] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40116] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40117] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40118] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40119] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40120] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40121] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40122] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40123] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40124] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40125] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40126] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40127] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40129] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40130] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40131] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40132] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40133] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40134] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40135] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40136] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40137] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40138] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40139] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40140] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40141] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40142] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40143] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40144] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40145] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40146] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40147] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40148] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40149] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40150] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40151] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40152] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40153] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40154] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40155] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40156] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40157] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40158] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40159] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40160] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40161] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40162] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40163] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40164] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40165] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40166] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40167] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40168] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40169] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40170] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40171] = "cpe-stable-backport: Backported in 6.17.3"
+
+CVE_STATUS[CVE-2025-40172] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40173] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40174] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40175] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40176] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40177] = "cpe-stable-backport: Backported in 6.17.5"
+
+CVE_STATUS[CVE-2025-40178] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40179] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40180] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40181] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40182] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40183] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40184] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40185] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40186] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40187] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40188] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40189] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40190] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40191] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40192] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40193] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40194] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40195] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40196] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40197] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40198] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40199] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40200] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40201] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40202] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40203] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40204] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40205] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40206] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40207] = "cpe-stable-backport: Backported in 6.17.4"
+
+CVE_STATUS[CVE-2025-40208] = "cpe-stable-backport: Backported in 6.17.4"
+
 CVE_STATUS[CVE-2025-40300] = "fixed-version: Fixed from version 6.17"
 
 CVE_STATUS[CVE-2025-40325] = "fixed-version: Fixed from version 6.15"