linux-yocto/6.12: update CVE exclusions (6.12.53)

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 1 changes (0 new | 1 updated): - 0 new CVEs: - 1 updated CVEs: CVE-2025-9152
        Date: Thu, 16 Oct 2025 13:08:42 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index f84d42cfe1c21773f17626f8c5bd5def1d379b07..48a7d59689dd874df470aceb9cfae19da7c6db58 100644 (file)
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,11 +1,11 @@
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2025-10-14 01:23:30.027767+00:00 for kernel version 6.12.52
-# From linux_kernel_cves 2025-10-14_baseline-1-gddc0a257837
+# Generated at 2025-10-16 13:21:03.993902+00:00 for kernel version 6.12.53
+# From linux_kernel_cves cve_2025-10-16_1200Z-2-g676292fb5cd
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.52"
+    this_version = "6.12.53"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -17274,8 +17274,76 @@ CVE_STATUS[CVE-2025-39964] = "cpe-stable-backport: Backported in 6.12.49"
 
 CVE_STATUS[CVE-2025-39965] = "cpe-stable-backport: Backported in 6.12.50"
 
+CVE_STATUS[CVE-2025-39966] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39967] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39968] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39969] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39970] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39971] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39972] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39973] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39974] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-39975] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39976] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-39977] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39978] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39979] = "fixed-version: only affects 6.14 onwards"
+
+CVE_STATUS[CVE-2025-39980] = "cpe-stable-backport: Backported in 6.12.50"
+
+# CVE-2025-39981 needs backporting (fixed from 6.17)
+
+CVE_STATUS[CVE-2025-39982] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39983] = "fixed-version: only affects 6.15 onwards"
+
+CVE_STATUS[CVE-2025-39984] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39985] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39986] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39987] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39988] = "cpe-stable-backport: Backported in 6.12.50"
+
 CVE_STATUS[CVE-2025-39989] = "cpe-stable-backport: Backported in 6.12.23"
 
+CVE_STATUS[CVE-2025-39990] = "cpe-stable-backport: Backported in 6.12.50"
+
+CVE_STATUS[CVE-2025-39991] = "cpe-stable-backport: Backported in 6.12.51"
+
+CVE_STATUS[CVE-2025-39992] = "cpe-stable-backport: Backported in 6.12.51"
+
+CVE_STATUS[CVE-2025-39993] = "cpe-stable-backport: Backported in 6.12.51"
+
+CVE_STATUS[CVE-2025-39994] = "cpe-stable-backport: Backported in 6.12.51"
+
+CVE_STATUS[CVE-2025-39995] = "cpe-stable-backport: Backported in 6.12.52"
+
+CVE_STATUS[CVE-2025-39996] = "cpe-stable-backport: Backported in 6.12.51"
+
+CVE_STATUS[CVE-2025-39997] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-39998] = "cpe-stable-backport: Backported in 6.12.51"
+
+CVE_STATUS[CVE-2025-39999] = "fixed-version: only affects 6.16 onwards"
+
+CVE_STATUS[CVE-2025-40000] = "cpe-stable-backport: Backported in 6.12.52"
+
 # CVE-2025-40014 needs backporting (fixed from 6.15)
 
 CVE_STATUS[CVE-2025-40114] = "cpe-stable-backport: Backported in 6.12.23"