diff options
-rw-r--r-- | meta/recipes-kernel/linux/cve-exclusion_5.10.inc | 199 |
1 files changed, 189 insertions, 10 deletions
diff --git a/meta/recipes-kernel/linux/cve-exclusion_5.10.inc b/meta/recipes-kernel/linux/cve-exclusion_5.10.inc index 583d81d0f2..4d959c90b1 100644 --- a/meta/recipes-kernel/linux/cve-exclusion_5.10.inc +++ b/meta/recipes-kernel/linux/cve-exclusion_5.10.inc | |||
@@ -1,9 +1,9 @@ | |||
1 | 1 | ||
2 | # Auto-generated CVE metadata, DO NOT EDIT BY HAND. | 2 | # Auto-generated CVE metadata, DO NOT EDIT BY HAND. |
3 | # Generated at 2023-12-05 05:25:07.507188 for version 5.10.202 | 3 | # Generated at 2024-02-21 03:55:27.305577 for version 5.10.209 |
4 | 4 | ||
5 | python check_kernel_cve_status_version() { | 5 | python check_kernel_cve_status_version() { |
6 | this_version = "5.10.202" | 6 | this_version = "5.10.209" |
7 | kernel_version = d.getVar("LINUX_VERSION") | 7 | kernel_version = d.getVar("LINUX_VERSION") |
8 | if kernel_version != this_version: | 8 | if kernel_version != this_version: |
9 | bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version)) | 9 | bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version)) |
@@ -5293,6 +5293,12 @@ CVE_CHECK_IGNORE += "CVE-2021-3348" | |||
5293 | # cpe-stable-backport: Backported in 5.10.46 | 5293 | # cpe-stable-backport: Backported in 5.10.46 |
5294 | CVE_CHECK_IGNORE += "CVE-2021-33624" | 5294 | CVE_CHECK_IGNORE += "CVE-2021-33624" |
5295 | 5295 | ||
5296 | # fixed-version: Fixed after version 5.4rc1 | ||
5297 | CVE_CHECK_IGNORE += "CVE-2021-33630" | ||
5298 | |||
5299 | # cpe-stable-backport: Backported in 5.10.177 | ||
5300 | CVE_CHECK_IGNORE += "CVE-2021-33631" | ||
5301 | |||
5296 | # cpe-stable-backport: Backported in 5.10.130 | 5302 | # cpe-stable-backport: Backported in 5.10.130 |
5297 | CVE_CHECK_IGNORE += "CVE-2021-33655" | 5303 | CVE_CHECK_IGNORE += "CVE-2021-33655" |
5298 | 5304 | ||
@@ -5822,7 +5828,8 @@ CVE_CHECK_IGNORE += "CVE-2022-1419" | |||
5822 | # cpe-stable-backport: Backported in 5.10.134 | 5828 | # cpe-stable-backport: Backported in 5.10.134 |
5823 | CVE_CHECK_IGNORE += "CVE-2022-1462" | 5829 | CVE_CHECK_IGNORE += "CVE-2022-1462" |
5824 | 5830 | ||
5825 | # CVE-2022-1508 needs backporting (fixed from 5.15rc1) | 5831 | # fixed-version: only affects 5.11rc1 onwards |
5832 | CVE_CHECK_IGNORE += "CVE-2022-1508" | ||
5826 | 5833 | ||
5827 | # cpe-stable-backport: Backported in 5.10.110 | 5834 | # cpe-stable-backport: Backported in 5.10.110 |
5828 | CVE_CHECK_IGNORE += "CVE-2022-1516" | 5835 | CVE_CHECK_IGNORE += "CVE-2022-1516" |
@@ -6370,7 +6377,8 @@ CVE_CHECK_IGNORE += "CVE-2022-3635" | |||
6370 | # fixed-version: only affects 5.19 onwards | 6377 | # fixed-version: only affects 5.19 onwards |
6371 | CVE_CHECK_IGNORE += "CVE-2022-3640" | 6378 | CVE_CHECK_IGNORE += "CVE-2022-3640" |
6372 | 6379 | ||
6373 | # CVE-2022-36402 has no known resolution | 6380 | # cpe-stable-backport: Backported in 5.10.193 |
6381 | CVE_CHECK_IGNORE += "CVE-2022-36402" | ||
6374 | 6382 | ||
6375 | # CVE-2022-3642 has no known resolution | 6383 | # CVE-2022-3642 has no known resolution |
6376 | 6384 | ||
@@ -6600,6 +6608,9 @@ CVE_CHECK_IGNORE += "CVE-2022-48425" | |||
6600 | # fixed-version: only affects 5.15rc1 onwards | 6608 | # fixed-version: only affects 5.15rc1 onwards |
6601 | CVE_CHECK_IGNORE += "CVE-2022-48502" | 6609 | CVE_CHECK_IGNORE += "CVE-2022-48502" |
6602 | 6610 | ||
6611 | # cpe-stable-backport: Backported in 5.10.118 | ||
6612 | CVE_CHECK_IGNORE += "CVE-2022-48619" | ||
6613 | |||
6603 | # fixed-version: Fixed after version 5.0rc1 | 6614 | # fixed-version: Fixed after version 5.0rc1 |
6604 | CVE_CHECK_IGNORE += "CVE-2023-0030" | 6615 | CVE_CHECK_IGNORE += "CVE-2023-0030" |
6605 | 6616 | ||
@@ -6719,6 +6730,8 @@ CVE_CHECK_IGNORE += "CVE-2023-1382" | |||
6719 | # cpe-stable-backport: Backported in 5.10.10 | 6730 | # cpe-stable-backport: Backported in 5.10.10 |
6720 | CVE_CHECK_IGNORE += "CVE-2023-1390" | 6731 | CVE_CHECK_IGNORE += "CVE-2023-1390" |
6721 | 6732 | ||
6733 | # CVE-2023-1476 has no known resolution | ||
6734 | |||
6722 | # cpe-stable-backport: Backported in 5.10.169 | 6735 | # cpe-stable-backport: Backported in 5.10.169 |
6723 | CVE_CHECK_IGNORE += "CVE-2023-1513" | 6736 | CVE_CHECK_IGNORE += "CVE-2023-1513" |
6724 | 6737 | ||
@@ -6891,7 +6904,8 @@ CVE_CHECK_IGNORE += "CVE-2023-23559" | |||
6891 | 6904 | ||
6892 | # CVE-2023-23586 needs backporting (fixed from 5.12rc1) | 6905 | # CVE-2023-23586 needs backporting (fixed from 5.12rc1) |
6893 | 6906 | ||
6894 | # CVE-2023-2430 needs backporting (fixed from 6.2rc5) | 6907 | # fixed-version: only affects 5.18rc1 onwards |
6908 | CVE_CHECK_IGNORE += "CVE-2023-2430" | ||
6895 | 6909 | ||
6896 | # cpe-stable-backport: Backported in 5.10.177 | 6910 | # cpe-stable-backport: Backported in 5.10.177 |
6897 | CVE_CHECK_IGNORE += "CVE-2023-2483" | 6911 | CVE_CHECK_IGNORE += "CVE-2023-2483" |
@@ -7221,7 +7235,8 @@ CVE_CHECK_IGNORE += "CVE-2023-39194" | |||
7221 | # cpe-stable-backport: Backported in 5.10.188 | 7235 | # cpe-stable-backport: Backported in 5.10.188 |
7222 | CVE_CHECK_IGNORE += "CVE-2023-39197" | 7236 | CVE_CHECK_IGNORE += "CVE-2023-39197" |
7223 | 7237 | ||
7224 | # CVE-2023-39198 needs backporting (fixed from 6.5rc7) | 7238 | # cpe-stable-backport: Backported in 5.10.208 |
7239 | CVE_CHECK_IGNORE += "CVE-2023-39198" | ||
7225 | 7240 | ||
7226 | # cpe-stable-backport: Backported in 5.10.188 | 7241 | # cpe-stable-backport: Backported in 5.10.188 |
7227 | CVE_CHECK_IGNORE += "CVE-2023-4004" | 7242 | CVE_CHECK_IGNORE += "CVE-2023-4004" |
@@ -7322,7 +7337,8 @@ CVE_CHECK_IGNORE += "CVE-2023-45871" | |||
7322 | # fixed-version: only affects 6.5rc1 onwards | 7337 | # fixed-version: only affects 6.5rc1 onwards |
7323 | CVE_CHECK_IGNORE += "CVE-2023-45898" | 7338 | CVE_CHECK_IGNORE += "CVE-2023-45898" |
7324 | 7339 | ||
7325 | # CVE-2023-4610 needs backporting (fixed from 6.4) | 7340 | # fixed-version: only affects 6.4rc1 onwards |
7341 | CVE_CHECK_IGNORE += "CVE-2023-4610" | ||
7326 | 7342 | ||
7327 | # fixed-version: only affects 6.4rc1 onwards | 7343 | # fixed-version: only affects 6.4rc1 onwards |
7328 | CVE_CHECK_IGNORE += "CVE-2023-4611" | 7344 | CVE_CHECK_IGNORE += "CVE-2023-4611" |
@@ -7333,8 +7349,14 @@ CVE_CHECK_IGNORE += "CVE-2023-4611" | |||
7333 | CVE_CHECK_IGNORE += "CVE-2023-4623" | 7349 | CVE_CHECK_IGNORE += "CVE-2023-4623" |
7334 | 7350 | ||
7335 | # cpe-stable-backport: Backported in 5.10.199 | 7351 | # cpe-stable-backport: Backported in 5.10.199 |
7352 | CVE_CHECK_IGNORE += "CVE-2023-46343" | ||
7353 | |||
7354 | # cpe-stable-backport: Backported in 5.10.199 | ||
7336 | CVE_CHECK_IGNORE += "CVE-2023-46813" | 7355 | CVE_CHECK_IGNORE += "CVE-2023-46813" |
7337 | 7356 | ||
7357 | # cpe-stable-backport: Backported in 5.10.209 | ||
7358 | CVE_CHECK_IGNORE += "CVE-2023-46838" | ||
7359 | |||
7338 | # cpe-stable-backport: Backported in 5.10.202 | 7360 | # cpe-stable-backport: Backported in 5.10.202 |
7339 | CVE_CHECK_IGNORE += "CVE-2023-46862" | 7361 | CVE_CHECK_IGNORE += "CVE-2023-46862" |
7340 | 7362 | ||
@@ -7349,18 +7371,41 @@ CVE_CHECK_IGNORE += "CVE-2023-4881" | |||
7349 | # cpe-stable-backport: Backported in 5.10.195 | 7371 | # cpe-stable-backport: Backported in 5.10.195 |
7350 | CVE_CHECK_IGNORE += "CVE-2023-4921" | 7372 | CVE_CHECK_IGNORE += "CVE-2023-4921" |
7351 | 7373 | ||
7374 | # CVE-2023-50431 needs backporting (fixed from 6.8rc1) | ||
7375 | |||
7352 | # fixed-version: only affects 6.0rc1 onwards | 7376 | # fixed-version: only affects 6.0rc1 onwards |
7353 | CVE_CHECK_IGNORE += "CVE-2023-5090" | 7377 | CVE_CHECK_IGNORE += "CVE-2023-5090" |
7354 | 7378 | ||
7379 | # cpe-stable-backport: Backported in 5.10.192 | ||
7380 | CVE_CHECK_IGNORE += "CVE-2023-51042" | ||
7381 | |||
7382 | # cpe-stable-backport: Backported in 5.10.188 | ||
7383 | CVE_CHECK_IGNORE += "CVE-2023-51043" | ||
7384 | |||
7355 | # fixed-version: only affects 5.13rc1 onwards | 7385 | # fixed-version: only affects 5.13rc1 onwards |
7356 | CVE_CHECK_IGNORE += "CVE-2023-5158" | 7386 | CVE_CHECK_IGNORE += "CVE-2023-5158" |
7357 | 7387 | ||
7388 | # cpe-stable-backport: Backported in 5.10.206 | ||
7389 | CVE_CHECK_IGNORE += "CVE-2023-51779" | ||
7390 | |||
7358 | # cpe-stable-backport: Backported in 5.10.199 | 7391 | # cpe-stable-backport: Backported in 5.10.199 |
7359 | CVE_CHECK_IGNORE += "CVE-2023-5178" | 7392 | CVE_CHECK_IGNORE += "CVE-2023-5178" |
7360 | 7393 | ||
7394 | # cpe-stable-backport: Backported in 5.10.205 | ||
7395 | CVE_CHECK_IGNORE += "CVE-2023-51780" | ||
7396 | |||
7397 | # cpe-stable-backport: Backported in 5.10.205 | ||
7398 | CVE_CHECK_IGNORE += "CVE-2023-51781" | ||
7399 | |||
7400 | # cpe-stable-backport: Backported in 5.10.205 | ||
7401 | CVE_CHECK_IGNORE += "CVE-2023-51782" | ||
7402 | |||
7361 | # cpe-stable-backport: Backported in 5.10.198 | 7403 | # cpe-stable-backport: Backported in 5.10.198 |
7362 | CVE_CHECK_IGNORE += "CVE-2023-5197" | 7404 | CVE_CHECK_IGNORE += "CVE-2023-5197" |
7363 | 7405 | ||
7406 | # cpe-stable-backport: Backported in 5.10.208 | ||
7407 | CVE_CHECK_IGNORE += "CVE-2023-52340" | ||
7408 | |||
7364 | # fixed-version: only affects 6.1rc1 onwards | 7409 | # fixed-version: only affects 6.1rc1 onwards |
7365 | CVE_CHECK_IGNORE += "CVE-2023-5345" | 7410 | CVE_CHECK_IGNORE += "CVE-2023-5345" |
7366 | 7411 | ||
@@ -7370,17 +7415,151 @@ CVE_CHECK_IGNORE += "CVE-2023-5633" | |||
7370 | # cpe-stable-backport: Backported in 5.10.199 | 7415 | # cpe-stable-backport: Backported in 5.10.199 |
7371 | CVE_CHECK_IGNORE += "CVE-2023-5717" | 7416 | CVE_CHECK_IGNORE += "CVE-2023-5717" |
7372 | 7417 | ||
7373 | # CVE-2023-5972 needs backporting (fixed from 6.6rc7) | 7418 | # fixed-version: only affects 6.2rc1 onwards |
7419 | CVE_CHECK_IGNORE += "CVE-2023-5972" | ||
7420 | |||
7421 | # fixed-version: only affects 5.15rc1 onwards | ||
7422 | CVE_CHECK_IGNORE += "CVE-2023-6039" | ||
7374 | 7423 | ||
7375 | # CVE-2023-6039 needs backporting (fixed from 6.5rc5) | 7424 | # cpe-stable-backport: Backported in 5.10.208 |
7425 | CVE_CHECK_IGNORE += "CVE-2023-6040" | ||
7376 | 7426 | ||
7377 | # fixed-version: only affects 6.6rc3 onwards | 7427 | # fixed-version: only affects 6.6rc3 onwards |
7378 | CVE_CHECK_IGNORE += "CVE-2023-6111" | 7428 | CVE_CHECK_IGNORE += "CVE-2023-6111" |
7379 | 7429 | ||
7380 | # CVE-2023-6121 needs backporting (fixed from 6.7rc3) | 7430 | # cpe-stable-backport: Backported in 5.10.203 |
7431 | CVE_CHECK_IGNORE += "CVE-2023-6121" | ||
7381 | 7432 | ||
7382 | # cpe-stable-backport: Backported in 5.10.195 | 7433 | # cpe-stable-backport: Backported in 5.10.195 |
7383 | CVE_CHECK_IGNORE += "CVE-2023-6176" | 7434 | CVE_CHECK_IGNORE += "CVE-2023-6176" |
7384 | 7435 | ||
7436 | # fixed-version: only affects 6.6rc1 onwards | ||
7437 | CVE_CHECK_IGNORE += "CVE-2023-6200" | ||
7438 | |||
7385 | # CVE-2023-6238 has no known resolution | 7439 | # CVE-2023-6238 has no known resolution |
7386 | 7440 | ||
7441 | # CVE-2023-6240 has no known resolution | ||
7442 | |||
7443 | # CVE-2023-6270 has no known resolution | ||
7444 | |||
7445 | # CVE-2023-6356 has no known resolution | ||
7446 | |||
7447 | # fixed-version: only affects 6.1rc1 onwards | ||
7448 | CVE_CHECK_IGNORE += "CVE-2023-6531" | ||
7449 | |||
7450 | # CVE-2023-6535 has no known resolution | ||
7451 | |||
7452 | # CVE-2023-6536 has no known resolution | ||
7453 | |||
7454 | # cpe-stable-backport: Backported in 5.10.192 | ||
7455 | CVE_CHECK_IGNORE += "CVE-2023-6546" | ||
7456 | |||
7457 | # CVE-2023-6560 needs backporting (fixed from 6.7rc4) | ||
7458 | |||
7459 | # cpe-stable-backport: Backported in 5.10.206 | ||
7460 | CVE_CHECK_IGNORE += "CVE-2023-6606" | ||
7461 | |||
7462 | # CVE-2023-6610 needs backporting (fixed from 6.7rc7) | ||
7463 | |||
7464 | # fixed-version: only affects 5.11rc1 onwards | ||
7465 | CVE_CHECK_IGNORE += "CVE-2023-6622" | ||
7466 | |||
7467 | # fixed-version: only affects 6.7rc1 onwards | ||
7468 | CVE_CHECK_IGNORE += "CVE-2023-6679" | ||
7469 | |||
7470 | # cpe-stable-backport: Backported in 5.10.204 | ||
7471 | CVE_CHECK_IGNORE += "CVE-2023-6817" | ||
7472 | |||
7473 | # cpe-stable-backport: Backported in 5.10.209 | ||
7474 | CVE_CHECK_IGNORE += "CVE-2023-6915" | ||
7475 | |||
7476 | # cpe-stable-backport: Backported in 5.10.204 | ||
7477 | CVE_CHECK_IGNORE += "CVE-2023-6931" | ||
7478 | |||
7479 | # cpe-stable-backport: Backported in 5.10.203 | ||
7480 | CVE_CHECK_IGNORE += "CVE-2023-6932" | ||
7481 | |||
7482 | # CVE-2023-7042 has no known resolution | ||
7483 | |||
7484 | # cpe-stable-backport: Backported in 5.10.173 | ||
7485 | CVE_CHECK_IGNORE += "CVE-2023-7192" | ||
7486 | |||
7487 | # fixed-version: only affects 6.5rc6 onwards | ||
7488 | CVE_CHECK_IGNORE += "CVE-2024-0193" | ||
7489 | |||
7490 | # CVE-2024-0340 needs backporting (fixed from 6.4rc6) | ||
7491 | |||
7492 | # fixed-version: only affects 6.2rc1 onwards | ||
7493 | CVE_CHECK_IGNORE += "CVE-2024-0443" | ||
7494 | |||
7495 | # fixed-version: only affects 5.15rc1 onwards | ||
7496 | CVE_CHECK_IGNORE += "CVE-2024-0562" | ||
7497 | |||
7498 | # CVE-2024-0564 has no known resolution | ||
7499 | |||
7500 | # CVE-2024-0565 needs backporting (fixed from 6.7rc6) | ||
7501 | |||
7502 | # fixed-version: only affects 6.4rc1 onwards | ||
7503 | CVE_CHECK_IGNORE += "CVE-2024-0582" | ||
7504 | |||
7505 | # cpe-stable-backport: Backported in 5.10.203 | ||
7506 | CVE_CHECK_IGNORE += "CVE-2024-0584" | ||
7507 | |||
7508 | # CVE-2024-0607 needs backporting (fixed from 6.7rc2) | ||
7509 | |||
7510 | # fixed-version: only affects 5.13rc1 onwards | ||
7511 | CVE_CHECK_IGNORE += "CVE-2024-0639" | ||
7512 | |||
7513 | # cpe-stable-backport: Backported in 5.10.198 | ||
7514 | CVE_CHECK_IGNORE += "CVE-2024-0641" | ||
7515 | |||
7516 | # cpe-stable-backport: Backported in 5.10.208 | ||
7517 | CVE_CHECK_IGNORE += "CVE-2024-0646" | ||
7518 | |||
7519 | # cpe-stable-backport: Backported in 5.10.180 | ||
7520 | CVE_CHECK_IGNORE += "CVE-2024-0775" | ||
7521 | |||
7522 | # CVE-2024-0841 has no known resolution | ||
7523 | |||
7524 | # fixed-version: only affects 5.13rc1 onwards | ||
7525 | CVE_CHECK_IGNORE += "CVE-2024-1085" | ||
7526 | |||
7527 | # CVE-2024-1086 needs backporting (fixed from 6.8rc2) | ||
7528 | |||
7529 | # CVE-2024-1312 needs backporting (fixed from 6.5rc4) | ||
7530 | |||
7531 | # CVE-2024-21803 has no known resolution | ||
7532 | |||
7533 | # CVE-2024-22099 has no known resolution | ||
7534 | |||
7535 | # CVE-2024-22386 has no known resolution | ||
7536 | |||
7537 | # fixed-version: only affects 5.15rc1 onwards | ||
7538 | CVE_CHECK_IGNORE += "CVE-2024-22705" | ||
7539 | |||
7540 | # CVE-2024-23196 has no known resolution | ||
7541 | |||
7542 | # CVE-2024-23307 has no known resolution | ||
7543 | |||
7544 | # CVE-2024-23848 has no known resolution | ||
7545 | |||
7546 | # CVE-2024-23849 needs backporting (fixed from 6.8rc2) | ||
7547 | |||
7548 | # CVE-2024-23850 has no known resolution | ||
7549 | |||
7550 | # CVE-2024-23851 has no known resolution | ||
7551 | |||
7552 | # CVE-2024-24855 has no known resolution | ||
7553 | |||
7554 | # CVE-2024-24857 has no known resolution | ||
7555 | |||
7556 | # CVE-2024-24858 has no known resolution | ||
7557 | |||
7558 | # CVE-2024-24859 has no known resolution | ||
7559 | |||
7560 | # CVE-2024-24860 has no known resolution | ||
7561 | |||
7562 | # CVE-2024-24861 has no known resolution | ||
7563 | |||
7564 | # CVE-2024-24864 has no known resolution | ||
7565 | |||