From 22ef4d2d116afb9d603a05fb107dd9da0e74558b Mon Sep 17 00:00:00 2001 From: Randy MacLeod Date: Thu, 15 May 2025 15:05:23 -0400 Subject: [PATCH] linux: add CVE_STATUS for a chrome* bug This is not a linux-yocto CVE yet it shows up in the reports as: linux-yocto-custom CVE-2023-3079 0.0 8.8 Unpatched https://nvd.nist.gov/vuln/detail/CVE-2023-3079 For reference, the CPE says: Affects cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* So affects all Linux systems, Running on/with cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* [ YOCTO #15780 ] Signed-off-by: Randy MacLeod Signed-off-by: Mathieu Dubois-Briand --- meta/recipes-kernel/linux/cve-exclusion.inc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/meta/recipes-kernel/linux/cve-exclusion.inc b/meta/recipes-kernel/linux/cve-exclusion.inc index f1b7db44b6..80c76433ef 100644 --- a/meta/recipes-kernel/linux/cve-exclusion.inc +++ b/meta/recipes-kernel/linux/cve-exclusion.inc @@ -133,6 +133,8 @@ CVE_STATUS[CVE-2023-1076] = "fixed-version: Fixed from version 6.3rc1" CVE_STATUS[CVE-2023-2898] = "fixed-version: Fixed from version 6.5rc1" +CVE_STATUS[CVE-2023-3079] = "not-applicable-config: Issue only affects chromium, which is not in linux-yocto" + CVE_STATUS[CVE-2023-3772] = "fixed-version: Fixed from version 6.5rc7" CVE_STATUS[CVE-2023-3773] = "fixed-version: Fixed from version 6.5rc7" -- 2.47.2