mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-17 18:32:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

cve-exclusions_6.1: ignore patched CVE-2022-38457 & CVE-2022-40133

Browse Source 
Ignore CVE-2022-38457 & CVE-2022-40133 as they looks patched in our 6.1
branch.

I've asked the NVD to add the commit as the patch for these CVEs, but in
the meantime, other sources seem to agree that the commit fixes these
CVEs (and I concur).

(From OE-Core rev: 990d1cbb1628577bd159e8266fa15976f1f17062)

Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Yoann Congal
2023-04-06 16:19:22 +02:00
committed by Richard Purdie
parent 09bdad16f3
commit fe76a450eb
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
meta/recipes-kernel/linux/cve-exclusion_6.1.inc
View File

@@ -13,3 +13,17 @@ CVE_CHECK_IGNORE += "CVE-2022-3566"
# Patched in kernel since v6.1 364f997b5cfe1db0d63a390fe7c801fa2b3115f6
CVE_CHECK_IGNORE += "CVE-2022-3567"
# 2023
# https://nvd.nist.gov/vuln/detail/CVE-2022-38457
# https://nvd.nist.gov/vuln/detail/CVE-2022-40133
# Both CVE-2022-38457 & CVE-2022-40133 are fixed by the same commit:
# Introduced in version v4.20 e14c02e6b6990e9f6ee18a214a22ac26bae1b25e
# Patched in kernel since v6.2 a309c7194e8a2f8bd4539b9449917913f6c2cd50
# Backported in version v6.1.7 7ac9578e45b20e3f3c0c8eb71f5417a499a7226a
# See:
# * https://www.linuxkernelcves.com/cves/CVE-2022-38457
# * https://www.linuxkernelcves.com/cves/CVE-2022-40133
# * https://lore.kernel.org/all/CAODzB9q3OBD0k6W2bcWrSZo2jC3EvV0PrLyWmO07rxR4nQgkJA@mail.gmail.com/T/
CVE_CHECK_IGNORE += "CVE-2022-38457 CVE-2022-40133"