]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commitdiff
cve-exclusions: set status for CVE-2025-71145
authorPeter Marko <peter.marko@siemens.com>
Thu, 16 Apr 2026 22:25:26 +0000 (00:25 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 20 Apr 2026 16:58:37 +0000 (17:58 +0100)
cvelistV5 tracks hashes instead of versions.
Same hashes are also present in NVD links.
Checking those hashes, fix is already available in linux-yocto.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
meta/recipes-kernel/linux/cve-exclusion.inc

index f86c8c3e2c5822c9ebec69edc2ab79e735c307f6..d27d7644798058127806defd47f88db8e7c206cc 100644 (file)
@@ -188,3 +188,7 @@ CVE_STATUS[CVE-2025-38656] = "fixed-version: Fixed from 6.17"
 
 # Fix https://git.kernel.org/linus/f1fdffe0afea02ba783acfe815b6a60e7180df40
 CVE_STATUS[CVE-2025-68195] = "fixed-version: Fixed from 6.18"
+
+# Fix https://git.kernel.org/stable/c/b4b64fda4d30a83a7f00e92a0c8a1d47699609f3
+# Backport https://git.kernel.org/stable/c/75c5d9bce072abbbc09b701a49869ac23c34a906
+CVE_STATUS[CVE-2025-71145] = "cpe-stable-backport: Fixed from v6.18.3"