From: Randy MacLeod Date: Thu, 15 May 2025 19:05:23 +0000 (-0400) Subject: linux: add CVE_STATUS for a chrome* bug X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=22ef4d2d116afb9d603a05fb107dd9da0e74558b;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git linux: add CVE_STATUS for a chrome* bug This is not a linux-yocto CVE yet it shows up in the reports as: linux-yocto-custom CVE-2023-3079 0.0 8.8 Unpatched https://nvd.nist.gov/vuln/detail/CVE-2023-3079 For reference, the CPE says: Affects cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* So affects all Linux systems, Running on/with cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* [ YOCTO #15780 ] Signed-off-by: Randy MacLeod Signed-off-by: Mathieu Dubois-Briand --- diff --git a/meta/recipes-kernel/linux/cve-exclusion.inc b/meta/recipes-kernel/linux/cve-exclusion.inc index f1b7db44b6..80c76433ef 100644 --- a/meta/recipes-kernel/linux/cve-exclusion.inc +++ b/meta/recipes-kernel/linux/cve-exclusion.inc @@ -133,6 +133,8 @@ CVE_STATUS[CVE-2023-1076] = "fixed-version: Fixed from version 6.3rc1" CVE_STATUS[CVE-2023-2898] = "fixed-version: Fixed from version 6.5rc1" +CVE_STATUS[CVE-2023-3079] = "not-applicable-config: Issue only affects chromium, which is not in linux-yocto" + CVE_STATUS[CVE-2023-3772] = "fixed-version: Fixed from version 6.5rc7" CVE_STATUS[CVE-2023-3773] = "fixed-version: Fixed from version 6.5rc7"