dpdk-module/21.11: ignore CVE-2021-3839 and CVE-2022-0669

These are fixed in 21.11.1 but the CPE data in NVD is incomplete.

Signed-off-by: Yogesh Tyagi <yogesh.tyagi@intel.com>
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>

1 files changed, 9 insertions, 0 deletions

diff --git a/recipes-extended/dpdk/dpdk-module_21.11.2.bb b/recipes-extended/dpdk/dpdk-module_21.11.2.bb
index d7ce6a0..307ff40 100644
--- a/recipes-extended/dpdk/dpdk-module_21.11.2.bb
+++ b/recipes-extended/dpdk/dpdk-module_21.11.2.bb
@@ -47,3 +47,12 @@ do_install() {
                O=${STAGING_KERNEL_BUILDDIR} \
                ${MODULES_INSTALL_TARGET}
 }
+
+# CVE-2021-3839 has been fixed by commit 4c40d30d2b in 21.11.1
+# NVD database is incomplete
+# CVE-2022-0669 has been fixed by commit 6cb68162e4 in 21.11.1
+# NVD database is incomplete
+CVE_CHECK_IGNORE += "\
+    CVE-2021-3839 \
+    CVE-2022-0669 \
+"