linux-yocto: tweak cve exclusions files

-tiny and -rt were updated to a 6.12 specific inclusion, but
the -standard kernel was missed.

This commit also creates a 6.12 exclusion file, that is populated
with the last updates for the 6.10 kernel. Although it is no
longer updated automatically, that may change in the future and
it still provides value as a place to manually add CVE exclusions.

(From OE-Core rev: ab2e88ba876d954a2fc3eadee5ac860858340d5c)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Bruce Ashfield
2024-12-12 12:49:47 -05:00
committed by Richard Purdie
parent 5a3b4300f8
commit f71c144f0d
2 changed files with 6661 additions and 1 deletions

File diff suppressed because it is too large Load Diff

View File

@@ -4,7 +4,7 @@ require recipes-kernel/linux/linux-yocto.inc
# CVE exclusions
include recipes-kernel/linux/cve-exclusion.inc
include recipes-kernel/linux/cve-exclusion_6.10.inc
include recipes-kernel/linux/cve-exclusion_6.12.inc
# board specific branches
KBRANCH:qemuarm ?= "v6.12/standard/arm-versatile-926ejs"