From b96d06bad8b79890b8e0773dfa1e94718a0a4180 Mon Sep 17 00:00:00 2001 From: Anuj Mittal Date: Tue, 11 May 2021 11:21:34 +0800 Subject: ixgbe, ixgbevf: exclude CVE-2015-1142857 from cve-check This was fixed in the kernel v4.4 but the NVD database doesn't list the kernel version or track the out of tree versions. Signed-off-by: Anuj Mittal --- recipes-kernel/intel-ethernet/ixgbe_5.11.3.bb | 3 +++ recipes-kernel/intel-ethernet/ixgbevf_4.11.1.bb | 3 +++ 2 files changed, 6 insertions(+) diff --git a/recipes-kernel/intel-ethernet/ixgbe_5.11.3.bb b/recipes-kernel/intel-ethernet/ixgbe_5.11.3.bb index 73b13c9b..8c7fb09c 100644 --- a/recipes-kernel/intel-ethernet/ixgbe_5.11.3.bb +++ b/recipes-kernel/intel-ethernet/ixgbe_5.11.3.bb @@ -39,3 +39,6 @@ PACKAGES += "${PN}-script" FILES_${PN}-script += "${sysconfdir}/network/set_irq_affinity" EXCLUDE_FROM_WORLD = "1" + +# This was fixed in kernel v4.4 +CVE_CHECK_WHITELIST += "CVE-2015-1142857" diff --git a/recipes-kernel/intel-ethernet/ixgbevf_4.11.1.bb b/recipes-kernel/intel-ethernet/ixgbevf_4.11.1.bb index d1c5f299..2867269a 100644 --- a/recipes-kernel/intel-ethernet/ixgbevf_4.11.1.bb +++ b/recipes-kernel/intel-ethernet/ixgbevf_4.11.1.bb @@ -40,3 +40,6 @@ do_install_append () { PACKAGES += "${PN}-script" FILES_${PN}-script += "${sysconfdir}/network/set_irq_affinity" + +# This was fixed in kernel v4.4 +CVE_CHECK_WHITELIST += "CVE-2015-1142857" -- cgit v1.2.3-54-g00ecf