upstream-layers/openembedded-core/meta/recipes-kernel/linux/cve-exclusion.inc

CVE_STATUS[CVE-1999-0656] = "not-applicable-config: specific to ugidd, part of the old user-mode NFS server"

CVE_STATUS[CVE-2006-2932] = "not-applicable-platform: specific to RHEL"

CVE_STATUS[CVE-2007-2764] = "not-applicable-platform: specific to Sun/Brocade SilkWorm switches"

CVE_STATUS[CVE-2007-4998] = "cpe-incorrect: a historic cp bug, no longer an issue as per https://bugzilla.redhat.com/show_bug.cgi?id=356471#c5"

CVE_STATUS[CVE-2008-2544] = "disputed: not an issue as per https://bugzilla.redhat.com/show_bug.cgi?id=449089#c22"

CVE_STATUS[CVE-2010-0298] = "fixed-version: 2.6.34 (1871c6)"

CVE_STATUS[CVE-2014-2648] = "cpe-incorrect: not Linux"

CVE_STATUS[CVE-2016-0774] = "ignored: result of incomplete backport"

CVE_STATUS[CVE-2016-3695] = "not-applicable-platform: specific to RHEL with securelevel patches"

CVE_STATUS[CVE-2016-3699] = "not-applicable-platform: specific to RHEL with securelevel patches"

CVE_STATUS[CVE-2017-6264] = "not-applicable-platform: Android specific"

CVE_STATUS[CVE-2017-1000377] = "not-applicable-platform: GRSecurity specific"

CVE_STATUS[CVE-2018-6559] = "not-applicable-platform: Issue only affects Ubuntu"

CVE_STATUS[CVE-2020-11935] = "not-applicable-config: Issue only affects aufs, which is not in linux-yocto"

# Introduced in version v6.1 7b88bda3761b95856cf97822efe8281c8100067b
# Patched in kernel since v6.2 4a625ceee8a0ab0273534cb6b432ce6b331db5ee
# But, the CVE is disputed:
CVE_STATUS[CVE-2023-23005] = "disputed: There are no realistic cases \
in which a user can cause the alloc_memory_type error case to be reached. \
See: https://bugzilla.suse.com/show_bug.cgi?id=1208844#c2"

# Old CVES taken before using new data from kernel CNA

CVE_STATUS[CVE-2014-8171] = "fixed-version: Fixed from version 3.12rc1"

CVE_STATUS[CVE-2017-1000255] = "fixed-version: Fixed from version 4.14rc5"

CVE_STATUS[CVE-2018-10840] = "fixed-version: Fixed from version 4.18rc1"

CVE_STATUS[CVE-2018-10876] = "fixed-version: Fixed from version 4.18rc4"

CVE_STATUS[CVE-2018-10882] = "fixed-version: Fixed from version 4.18rc4"

CVE_STATUS[CVE-2018-10902] = "fixed-version: Fixed from version 4.18rc6"

CVE_STATUS[CVE-2018-14625] = "fixed-version: Fixed from version 4.20rc6"

CVE_STATUS[CVE-2019-3016] = "fixed-version: Fixed from version 5.6rc1"

CVE_STATUS[CVE-2019-3819] = "fixed-version: Fixed from version 5.0rc6"

CVE_STATUS[CVE-2019-3887] = "fixed-version: Fixed from version 5.1rc4"

CVE_STATUS[CVE-2020-10742] = "fixed-version: Fixed from version 3.16rc1"

CVE_STATUS[CVE-2020-16119] = "fixed-version: Fixed from version 5.15rc2"

CVE_STATUS[CVE-2020-1749] = "fixed-version: Fixed from version 5.5rc1"

CVE_STATUS[CVE-2020-25672] = "fixed-version: Fixed from version 5.12rc7"

CVE_STATUS[CVE-2020-27815] = "fixed-version: Fixed from version 5.11rc1"

CVE_STATUS[CVE-2020-8834] = "fixed-version: Fixed from version 4.18rc1"

CVE_STATUS[CVE-2021-20194] = "fixed-version: Fixed from version 5.10rc1"

CVE_STATUS[CVE-2021-20265] = "fixed-version: Fixed from version 4.5rc3"

CVE_STATUS[CVE-2021-3564] = "fixed-version: Fixed from version 5.13rc5"

CVE_STATUS[CVE-2021-3669] = "fixed-version: Fixed from version 5.15rc1"

CVE_STATUS[CVE-2021-3759] = "fixed-version: Fixed from version 5.15rc1"

CVE_STATUS[CVE-2021-4218] = "fixed-version: Fixed from version 5.8rc1"

CVE_STATUS[CVE-2022-0286] = "fixed-version: Fixed from version 5.14rc2"

CVE_STATUS[CVE-2022-1462] = "fixed-version: Fixed from version 5.19rc7"

CVE_STATUS[CVE-2022-2308] = "fixed-version: Fixed from version 6.0"

CVE_STATUS[CVE-2022-2327] = "fixed-version: Fixed from version 5.12rc1"

CVE_STATUS[CVE-2022-2663] = "fixed-version: Fixed from version 6.0rc5"

CVE_STATUS[CVE-2022-2785] = "fixed-version: Fixed from version 6.0rc1"

CVE_STATUS[CVE-2022-3435] = "fixed-version: Fixed from version 6.1rc1"

CVE_STATUS[CVE-2022-3523] = "fixed-version: Fixed from version 6.1rc1"

CVE_STATUS[CVE-2022-3534] = "fixed-version: Fixed from version 6.2rc1"

CVE_STATUS[CVE-2022-3566] = "fixed-version: Fixed from version 6.1rc1"

CVE_STATUS[CVE-2022-3567] = "fixed-version: Fixed from version 6.1rc1"

CVE_STATUS[CVE-2022-3619] = "fixed-version: Fixed from version 6.1rc4"

CVE_STATUS[CVE-2022-3621] = "fixed-version: Fixed from version 6.1rc1"

CVE_STATUS[CVE-2022-3624] = "fixed-version: Fixed from version 6.0rc1"

CVE_STATUS[CVE-2022-3629] = "fixed-version: Fixed from version 6.0rc1"

CVE_STATUS[CVE-2022-3630] = "fixed-version: Fixed from version 6.0rc1"

CVE_STATUS[CVE-2022-3633] = "fixed-version: Fixed from version 6.0rc1"

CVE_STATUS[CVE-2022-3636] = "fixed-version: Fixed from version 5.19rc1"

CVE_STATUS[CVE-2022-36402] = "fixed-version: Fixed from version 6.5"

CVE_STATUS[CVE-2022-3646] = "fixed-version: Fixed from version 6.1rc1"

CVE_STATUS[CVE-2022-42895] = "fixed-version: Fixed from version 6.1rc4"

CVE_STATUS[CVE-2022-4382] = "fixed-version: Fixed from version 6.2rc5"

CVE_STATUS[CVE-2023-1073] = "fixed-version: Fixed from version 6.2rc5"

CVE_STATUS[CVE-2023-1074] = "fixed-version: Fixed from version 6.2rc6"

CVE_STATUS[CVE-2023-1075] = "fixed-version: Fixed from version 6.2rc7"

CVE_STATUS[CVE-2023-1076] = "fixed-version: Fixed from version 6.3rc1"

CVE_STATUS[CVE-2023-2898] = "fixed-version: Fixed from version 6.5rc1"

CVE_STATUS[CVE-2023-3079] = "not-applicable-config: Issue only affects chromium, which is not in linux-yocto"

CVE_STATUS[CVE-2023-3772] = "fixed-version: Fixed from version 6.5rc7"

CVE_STATUS[CVE-2023-3773] = "fixed-version: Fixed from version 6.5rc7"

CVE_STATUS[CVE-2023-4155] = "fixed-version: Fixed from version 6.5rc6"

CVE_STATUS[CVE-2023-6176] = "fixed-version: Fixed from version 6.6rc2"

# Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f98364e926626c678fb4b9004b75cacf92ff0662
CVE_STATUS[CVE-2023-6270] = "fixed-version: Fixed from 6.9"

# Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=567320c46a60a3c39b69aa1df802d753817a3f86
CVE_STATUS[CVE-2023-6610] = "fixed-version: Fixed from 6.7rc7"

#Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=65c95f78917ea6fa7ff189a2c19879c4fe161873
CVE_STATUS[CVE-2023-6679] = "fixed-version: Fixed from 6.7rc6"

#Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ad25ee36f00172f7d53242dc77c69fff7ced0755
CVE_STATUS[CVE-2023-7042] = "fixed-version: Fixed from 6.9rc1"

#Fix https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=7315dc1e122c85ffdfc8defffbb8f8b616c2eb1a
CVE_STATUS[CVE-2024-0193] = "fixed-version: Fixed from 6.7"

# Fix https://git.kernel.org/linus/517621b7060096e48e42f545fa6646fc00252eac
CVE_STATUS[CVE-2022-38096] = "fixed-version: Fixed from 6.9"

# Fix https://git.kernel.org/linus/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c
# Fix https://git.kernel.org/linus/79ed288cef201f1f212dfb934bcaac75572fb8f6
CVE_STATUS[CVE-2023-39176] = "fixed-version: Fixed from 6.5"

# Fix https://git.kernel.org/linus/e202a1e8634b186da38cbbff85382ea2b9e297cf
CVE_STATUS[CVE-2023-39179] = "fixed-version: Fixed from 6.5"
CVE_STATUS[CVE-2023-39180] = "fixed-version: Fixed from 6.5"

# Fix https://git.kernel.org/linus/efa56305908ba20de2104f1b8508c6a7401833be
# Fix https://git.kernel.org/linus/0849a5441358cef02586fb2d60f707c0db195628
# Fix https://git.kernel.org/linus/9a1abc24850eb759e36a2f8869161c3b7254c904
CVE_STATUS[CVE-2023-6535] = "fixed-version: Fixed from 6.8"

# Fix https://git.kernel.org/linus/6c54b7bc8a31ce0f7cc7f8deef05067df414f1d8
CVE_STATUS[CVE-2023-53012] = "fixed-version: Fixed from 6.2"

# Fix https://git.kernel.org/linus/0657b20c5a76c938612f8409735a8830d257866e
CVE_STATUS[CVE-2023-53187] = "fixed-version: Fixed from 6.5"

# Fix https://git.kernel.org/linus/1ba0403ac6447f2d63914fb760c44a3b19c44eaf
CVE_STATUS[CVE-2024-49854] = "fixed-version: Fixed from 6.12"

# Fix https://git.kernel.org/linus/cf80c02a9fdb6c5bc8508beb6a0f6a1294fc32f6
CVE_STATUS[CVE-2025-38656] = "fixed-version: Fixed from 6.17"

# Fix https://git.kernel.org/linus/f1fdffe0afea02ba783acfe815b6a60e7180df40
CVE_STATUS[CVE-2025-68195] = "fixed-version: Fixed from 6.18"

# Fix https://git.kernel.org/stable/c/b4b64fda4d30a83a7f00e92a0c8a1d47699609f3
# Backport https://git.kernel.org/stable/c/75c5d9bce072abbbc09b701a49869ac23c34a906
CVE_STATUS[CVE-2025-71145] = "cpe-stable-backport: Fixed from v6.18.3"