linux-yocto/6.12: update CVE exclusions (6.12.59)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 9 changes (1 new | 8 updated): - 1 new CVEs: CVE-2025-7007 - 8 updated CVEs: CVE-2025-34147, CVE-2025-34148, CVE-2025-34149, CVE-2025-34150, CVE-2025-34151, CVE-2025-34152, CVE-2025-35028, CVE-2025-7195
        Date: Mon, 1 Dec 2025 16:36:50 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index b66f36a2023c913f48200d48c1cfcd93276b9356..583ce7aa405ce413efc290c02e94a14629eefe99 100644 (file)
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,11 +1,11 @@
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2025-11-14 16:49:37.841595+00:00 for kernel version 6.12.58
-# From linux_kernel_cves cve_2025-11-14_1600Z-2-g7d42ca6d8de
+# Generated at 2025-12-01 16:43:28.801277+00:00 for kernel version 6.12.59
+# From linux_kernel_cves cve_2025-12-01_1600Z-2-g8d7b13eec97
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.58"
+    this_version = "6.12.59"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -14750,7 +14750,7 @@ CVE_STATUS[CVE-2025-22105] = "cpe-stable-backport: Backported in 6.12.57"
 
 CVE_STATUS[CVE-2025-22106] = "cpe-stable-backport: Backported in 6.12.49"
 
-# CVE-2025-22107 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-22107] = "cpe-stable-backport: Backported in 6.12.59"
 
 # CVE-2025-22108 needs backporting (fixed from 6.15)
 
@@ -14778,7 +14778,7 @@ CVE_STATUS[CVE-2025-22119] = "cpe-stable-backport: Backported in 6.12.35"
 
 CVE_STATUS[CVE-2025-22120] = "cpe-stable-backport: Backported in 6.12.26"
 
-# CVE-2025-22121 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-22121] = "cpe-stable-backport: Backported in 6.12.59"
 
 CVE_STATUS[CVE-2025-22122] = "cpe-stable-backport: Backported in 6.12.33"
 
@@ -14794,7 +14794,7 @@ CVE_STATUS[CVE-2025-22126] = "cpe-stable-backport: Backported in 6.12.25"
 
 CVE_STATUS[CVE-2025-22128] = "cpe-stable-backport: Backported in 6.12.35"
 
-# CVE-2025-23129 needs backporting (fixed from 6.15)
+CVE_STATUS[CVE-2025-23129] = "cpe-stable-backport: Backported in 6.12.59"
 
 CVE_STATUS[CVE-2025-23130] = "cpe-stable-backport: Backported in 6.12.57"
 
@@ -16710,7 +16710,7 @@ CVE_STATUS[CVE-2025-38676] = "cpe-stable-backport: Backported in 6.12.44"
 
 CVE_STATUS[CVE-2025-38677] = "cpe-stable-backport: Backported in 6.12.44"
 
-# CVE-2025-38678 needs backporting (fixed from 6.17)
+CVE_STATUS[CVE-2025-38678] = "cpe-stable-backport: Backported in 6.12.59"
 
 CVE_STATUS[CVE-2025-38679] = "cpe-stable-backport: Backported in 6.12.43"
 
@@ -17438,7 +17438,7 @@ CVE_STATUS[CVE-2025-39979] = "fixed-version: only affects 6.14 onwards"
 
 CVE_STATUS[CVE-2025-39980] = "cpe-stable-backport: Backported in 6.12.50"
 
-# CVE-2025-39981 needs backporting (fixed from 6.17)
+CVE_STATUS[CVE-2025-39981] = "cpe-stable-backport: Backported in 6.12.59"
 
 CVE_STATUS[CVE-2025-39982] = "cpe-stable-backport: Backported in 6.12.50"
 
@@ -17526,7 +17526,7 @@ CVE_STATUS[CVE-2025-40023] = "fixed-version: only affects 6.16 onwards"
 
 CVE_STATUS[CVE-2025-40024] = "cpe-stable-backport: Backported in 6.12.50"
 
-# CVE-2025-40025 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40025 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40026] = "cpe-stable-backport: Backported in 6.12.52"
 
@@ -17584,7 +17584,7 @@ CVE_STATUS[CVE-2025-40052] = "cpe-stable-backport: Backported in 6.12.53"
 
 CVE_STATUS[CVE-2025-40053] = "cpe-stable-backport: Backported in 6.12.53"
 
-# CVE-2025-40054 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40054 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40055] = "cpe-stable-backport: Backported in 6.12.53"
 
@@ -17604,9 +17604,9 @@ CVE_STATUS[CVE-2025-40062] = "cpe-stable-backport: Backported in 6.12.53"
 
 CVE_STATUS[CVE-2025-40063] = "fixed-version: only affects 6.16 onwards"
 
-# CVE-2025-40064 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40064 needs backporting (fixed from 6.18)
 
-# CVE-2025-40065 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40065 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40066] = "fixed-version: only affects 6.15 onwards"
 
@@ -17624,13 +17624,13 @@ CVE_STATUS[CVE-2025-40072] = "fixed-version: only affects 6.16 onwards"
 
 CVE_STATUS[CVE-2025-40073] = "fixed-version: only affects 6.16 onwards"
 
-# CVE-2025-40074 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40074 needs backporting (fixed from 6.18)
 
-# CVE-2025-40075 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40075 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40076] = "fixed-version: only affects 6.17 onwards"
 
-# CVE-2025-40077 needs backporting (fixed from 6.18rc1)
+CVE_STATUS[CVE-2025-40077] = "cpe-stable-backport: Backported in 6.12.59"
 
 CVE_STATUS[CVE-2025-40078] = "cpe-stable-backport: Backported in 6.12.53"
 
@@ -17648,7 +17648,7 @@ CVE_STATUS[CVE-2025-40084] = "cpe-stable-backport: Backported in 6.12.56"
 
 CVE_STATUS[CVE-2025-40085] = "cpe-stable-backport: Backported in 6.12.55"
 
-# CVE-2025-40086 needs backporting (fixed from 6.18rc2)
+# CVE-2025-40086 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40087] = "cpe-stable-backport: Backported in 6.12.55"
 
@@ -17670,9 +17670,9 @@ CVE_STATUS[CVE-2025-40095] = "cpe-stable-backport: Backported in 6.12.55"
 
 CVE_STATUS[CVE-2025-40096] = "cpe-stable-backport: Backported in 6.12.55"
 
-# CVE-2025-40097 needs backporting (fixed from 6.18rc2)
+CVE_STATUS[CVE-2025-40097] = "cpe-stable-backport: Backported in 6.12.59"
 
-# CVE-2025-40098 needs backporting (fixed from 6.18rc2)
+# CVE-2025-40098 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40099] = "cpe-stable-backport: Backported in 6.12.55"
 
@@ -17680,7 +17680,7 @@ CVE_STATUS[CVE-2025-40100] = "cpe-stable-backport: Backported in 6.12.55"
 
 CVE_STATUS[CVE-2025-40101] = "cpe-stable-backport: Backported in 6.12.55"
 
-# CVE-2025-40102 needs backporting (fixed from 6.18rc2)
+# CVE-2025-40102 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40103] = "cpe-stable-backport: Backported in 6.12.55"
 
@@ -17702,7 +17702,7 @@ CVE_STATUS[CVE-2025-40111] = "cpe-stable-backport: Backported in 6.12.54"
 
 CVE_STATUS[CVE-2025-40112] = "cpe-stable-backport: Backported in 6.12.53"
 
-# CVE-2025-40113 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40113 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40114] = "cpe-stable-backport: Backported in 6.12.23"
 
@@ -17734,7 +17734,7 @@ CVE_STATUS[CVE-2025-40127] = "cpe-stable-backport: Backported in 6.12.53"
 
 CVE_STATUS[CVE-2025-40129] = "cpe-stable-backport: Backported in 6.12.53"
 
-# CVE-2025-40130 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40130 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40131] = "fixed-version: only affects 6.16 onwards"
 
@@ -17744,15 +17744,15 @@ CVE_STATUS[CVE-2025-40133] = "cpe-stable-backport: Backported in 6.12.55"
 
 CVE_STATUS[CVE-2025-40134] = "cpe-stable-backport: Backported in 6.12.53"
 
-# CVE-2025-40135 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40135 needs backporting (fixed from 6.18)
 
-# CVE-2025-40136 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40136 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40137] = "cpe-stable-backport: Backported in 6.12.53"
 
 CVE_STATUS[CVE-2025-40138] = "fixed-version: only affects 6.17 onwards"
 
-# CVE-2025-40139 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40139 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40140] = "cpe-stable-backport: Backported in 6.12.53"
 
@@ -17762,19 +17762,17 @@ CVE_STATUS[CVE-2025-40142] = "cpe-stable-backport: Backported in 6.12.53"
 
 CVE_STATUS[CVE-2025-40143] = "fixed-version: only affects 6.17 onwards"
 
-CVE_STATUS[CVE-2025-40144] = "cpe-stable-backport: Backported in 6.12.53"
-
 CVE_STATUS[CVE-2025-40145] = "fixed-version: only affects 6.15 onwards"
 
-# CVE-2025-40146 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40146 needs backporting (fixed from 6.18)
 
-# CVE-2025-40147 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40147 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40148] = "fixed-version: only affects 6.16 onwards"
 
-# CVE-2025-40149 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40149 needs backporting (fixed from 6.18)
 
-# CVE-2025-40150 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40150 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40151] = "fixed-version: only affects 6.17 onwards"
 
@@ -17790,7 +17788,7 @@ CVE_STATUS[CVE-2025-40156] = "cpe-stable-backport: Backported in 6.12.53"
 
 CVE_STATUS[CVE-2025-40157] = "cpe-stable-backport: Backported in 6.12.53"
 
-# CVE-2025-40158 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40158 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40159] = "cpe-stable-backport: Backported in 6.12.54"
 
@@ -17802,7 +17800,7 @@ CVE_STATUS[CVE-2025-40162] = "cpe-stable-backport: Backported in 6.12.55"
 
 CVE_STATUS[CVE-2025-40163] = "fixed-version: only affects 6.17 onwards"
 
-# CVE-2025-40164 needs backporting (fixed from 6.18rc2)
+# CVE-2025-40164 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40165] = "cpe-stable-backport: Backported in 6.12.55"
 
@@ -17810,11 +17808,11 @@ CVE_STATUS[CVE-2025-40166] = "cpe-stable-backport: Backported in 6.12.55"
 
 CVE_STATUS[CVE-2025-40167] = "cpe-stable-backport: Backported in 6.12.55"
 
-# CVE-2025-40168 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40168 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40169] = "cpe-stable-backport: Backported in 6.12.53"
 
-# CVE-2025-40170 needs backporting (fixed from 6.18rc1)
+# CVE-2025-40170 needs backporting (fixed from 6.18)
 
 CVE_STATUS[CVE-2025-40171] = "cpe-stable-backport: Backported in 6.12.53"
 
@@ -17892,6 +17890,16 @@ CVE_STATUS[CVE-2025-40207] = "cpe-stable-backport: Backported in 6.12.54"
 
 CVE_STATUS[CVE-2025-40208] = "fixed-version: only affects 6.15 onwards"
 
+CVE_STATUS[CVE-2025-40209] = "cpe-stable-backport: Backported in 6.12.58"
+
+# CVE-2025-40210 needs backporting (fixed from 6.18)
+
+CVE_STATUS[CVE-2025-40211] = "cpe-stable-backport: Backported in 6.12.58"
+
+CVE_STATUS[CVE-2025-40212] = "cpe-stable-backport: Backported in 6.12.59"
+
+CVE_STATUS[CVE-2025-40213] = "fixed-version: only affects 6.17 onwards"
+
 CVE_STATUS[CVE-2025-40300] = "cpe-stable-backport: Backported in 6.12.47"
 
 # CVE-2025-40325 needs backporting (fixed from 6.15)