mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-01-29 21:08:42 +01:00
Code Issues Packages Projects Releases Wiki Activity

linux-yocto: extract generic kernel CVE_STATUS

Browse Source 
Some of the CVE_STATUS assignments are not specific to the version, so
move them to an unversioned file and include it in the recipes.

For example: some CVEs are disputed, or are specific to other
distributions.

(From OE-Core rev: d8656d9d4dfcaef6b492f5bf4cb003f16d7a3a4b)

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Ross Burton
2023-08-07 15:45:17 +01:00
committed by Richard Purdie
parent 63e4205cda
commit b0152a3464
3 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
meta/recipes-kernel/linux/cve-exclusion.inc Normal file
View File

@@ -0,0 +1,10 @@
CVE_STATUS[CVE-2018-6559] = "not-applicable-platform: Issue only affects Ubuntu"
CVE_STATUS[CVE-2020-11935] = "not-applicable-config: Issue only affects aufs, which is not in linux-yocto"
# Introduced in version v6.1 7b88bda3761b95856cf97822efe8281c8100067b
# Patched in kernel since v6.2 4a625ceee8a0ab0273534cb6b432ce6b331db5ee
# But, the CVE is disputed:
CVE_STATUS[CVE-2023-23005] = "disputed: There are no realistic cases \
in which a user can cause the alloc_memory_type error case to be reached. \
See: https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2"

1
meta/recipes-kernel/linux/linux-yocto_6.1.bb
View File

@@ -3,6 +3,7 @@ KBRANCH ?= "v6.1/standard/base"
require recipes-kernel/linux/linux-yocto.inc
# CVE exclusions
include recipes-kernel/linux/cve-exclusion.inc
include recipes-kernel/linux/cve-exclusion_6.1.inc
# board specific branches

1
meta/recipes-kernel/linux/linux-yocto_6.4.bb
View File

@@ -3,6 +3,7 @@ KBRANCH ?= "v6.4/standard/base"
require recipes-kernel/linux/linux-yocto.inc
# CVE exclusions
include recipes-kernel/linux/cve-exclusion.inc
include recipes-kernel/linux/cve-exclusion_6.4.inc
# board specific branches