From: Bruce Ashfield Date: Mon, 29 Sep 2025 18:59:28 +0000 (-0400) Subject: linux-yocto/6.16: update CVE exclusions (6.16.9) X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c764baf02d9a0291acb5f4a70a2f86a56dc308be;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git linux-yocto/6.16: update CVE exclusions (6.16.9) Data pulled from: https://github.com/CVEProject/cvelistV5 1/1 [ Author: cvelistV5 Github Action Email: github_action@example.com Subject: 1 changes (1 new | 0 updated): - 1 new CVEs: CVE-2025-11135 - 0 updated CVEs: Date: Mon, 29 Sep 2025 01:40:51 +0000 ] Signed-off-by: Bruce Ashfield Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie --- diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.16.inc b/meta/recipes-kernel/linux/cve-exclusion_6.16.inc index a6d72242e2..17776b59a0 100644 --- a/meta/recipes-kernel/linux/cve-exclusion_6.16.inc +++ b/meta/recipes-kernel/linux/cve-exclusion_6.16.inc @@ -1,11 +1,11 @@ # Auto-generated CVE metadata, DO NOT EDIT BY HAND. -# Generated at 2025-09-22 03:24:59.110083+00:00 for kernel version 6.16.8 -# From linux_kernel_cves cve_2025-09-22_0200Z-2-gd662e5ed470 +# Generated at 2025-09-29 01:46:30.994598+00:00 for kernel version 6.16.9 +# From linux_kernel_cves cve_2025-09-29_0100Z python check_kernel_cve_status_version() { - this_version = "6.16.8" + this_version = "6.16.9" kernel_version = d.getVar("LINUX_VERSION") if kernel_version != this_version: bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version)) @@ -4984,8 +4984,6 @@ CVE_STATUS[CVE-2022-50401] = "fixed-version: Fixed from version 6.2" CVE_STATUS[CVE-2022-50402] = "fixed-version: Fixed from version 6.2" -CVE_STATUS[CVE-2022-50403] = "fixed-version: Fixed from version 6.2" - CVE_STATUS[CVE-2022-50404] = "fixed-version: Fixed from version 6.2" CVE_STATUS[CVE-2022-50405] = "fixed-version: Fixed from version 6.2" @@ -12944,6 +12942,8 @@ CVE_STATUS[CVE-2024-58239] = "fixed-version: Fixed from version 6.8" CVE_STATUS[CVE-2024-58240] = "fixed-version: Fixed from version 6.8" +CVE_STATUS[CVE-2024-58241] = "fixed-version: Fixed from version 6.12" + CVE_STATUS[CVE-2025-21629] = "fixed-version: Fixed from version 6.13" CVE_STATUS[CVE-2025-21631] = "fixed-version: Fixed from version 6.13" @@ -16348,6 +16348,54 @@ CVE_STATUS[CVE-2025-39865] = "cpe-stable-backport: Backported in 6.16.6" CVE_STATUS[CVE-2025-39866] = "cpe-stable-backport: Backported in 6.16.6" +CVE_STATUS[CVE-2025-39867] = "fixed-version: only affects 6.17rc1 onwards" + +CVE_STATUS[CVE-2025-39868] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39869] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39870] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39871] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39872] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39873] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39874] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39875] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39876] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39877] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39878] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39879] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39880] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39881] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39882] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39883] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39884] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39885] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39886] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39887] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39888] = "cpe-stable-backport: Backported in 6.16.8" + +CVE_STATUS[CVE-2025-39889] = "fixed-version: Fixed from version 6.15" + +CVE_STATUS[CVE-2025-39890] = "fixed-version: Fixed from version 6.16" + CVE_STATUS[CVE-2025-39930] = "fixed-version: Fixed from version 6.15" CVE_STATUS[CVE-2025-39989] = "fixed-version: Fixed from version 6.15"