[meta][PATCH 09/11] linux-yocto/6.18: update CVE exclusions (6.18.19)

bruce.ashfield
2026-03-23T13:51:16Z

Data pulled from: https://github.com/CVEProject/cvelistV5

1/1 [
Author: cvelistV5 Github Action
Email: github_action@example.com
Subject: 3 changes (1 new | 2 updated): - 1 new CVEs: CVE-2026-4606 - 2 updated CVEs: CVE-2024-1394, CVE-2025-7195
Date: Mon, 23 Mar 2026 01:28:23 +0000

]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
.../linux/cve-exclusion_6.18.inc | 92 ++++++++++++++++++-
1 file changed, 89 insertions(+), 3 deletions(-)

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.18.inc b/meta/recipes-kernel/linux/cve-exclusion_6.18.inc
index e6df676ae7..73b93ff135 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.18.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.18.inc
@@ -1,11 +1,11 @@

# Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2026-03-17 18:38:31.921355+00:00 for kernel version 6.18.18
-# From linux_kernel_cves cve_2026-03-17_1700Z-2-g05851354eaa
+# Generated at 2026-03-23 02:14:01.393507+00:00 for kernel version 6.18.19
+# From linux_kernel_cves cve_2026-03-23_0100Z

python check_kernel_cve_status_version() {
- this_version = "6.18.18"
+ this_version = "6.18.19"
kernel_version = d.getVar("LINUX_VERSION")
if kernel_version != this_version:
bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -20422,6 +20422,18 @@ CVE_STATUS[CVE-2025-71238] = "cpe-stable-backport: Backported in 6.18.13"

CVE_STATUS[CVE-2025-71239] = "cpe-stable-backport: Backported in 6.18.16"

+CVE_STATUS[CVE-2025-71265] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2025-71266] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2025-71267] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2025-71268] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2025-71269] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2025-71270] = "cpe-stable-backport: Backported in 6.18.10"
+
CVE_STATUS[CVE-2026-22976] = "cpe-stable-backport: Backported in 6.18.6"

CVE_STATUS[CVE-2026-22977] = "cpe-stable-backport: Backported in 6.18.6"
@@ -20954,3 +20966,77 @@ CVE_STATUS[CVE-2026-23240] = "cpe-stable-backport: Backported in 6.18.16"

CVE_STATUS[CVE-2026-23241] = "cpe-stable-backport: Backported in 6.18.16"

+CVE_STATUS[CVE-2026-23242] = "cpe-stable-backport: Backported in 6.18.14"
+
+CVE_STATUS[CVE-2026-23243] = "cpe-stable-backport: Backported in 6.18.14"
+
+CVE_STATUS[CVE-2026-23244] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23245] = "cpe-stable-backport: Backported in 6.18.18"
+
+CVE_STATUS[CVE-2026-23246] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23247] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23248] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23249] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2026-23250] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2026-23251] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2026-23252] = "cpe-stable-backport: Backported in 6.18.16"
+
+CVE_STATUS[CVE-2026-23253] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23254] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23255] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23256] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23257] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23258] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23259] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23260] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23261] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23262] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23263] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23264] = "cpe-stable-backport: Backported in 6.18.10"
+
+CVE_STATUS[CVE-2026-23265] = "cpe-stable-backport: Backported in 6.18.13"
+
+CVE_STATUS[CVE-2026-23266] = "cpe-stable-backport: Backported in 6.18.13"
+
+CVE_STATUS[CVE-2026-23267] = "cpe-stable-backport: Backported in 6.18.13"
+
+CVE_STATUS[CVE-2026-23268] = "cpe-stable-backport: Backported in 6.18.18"
+
+CVE_STATUS[CVE-2026-23269] = "cpe-stable-backport: Backported in 6.18.18"
+
+CVE_STATUS[CVE-2026-23270] = "cpe-stable-backport: Backported in 6.18.18"
+
+CVE_STATUS[CVE-2026-23271] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23272] = "cpe-stable-backport: Backported in 6.18.17"
+
+CVE_STATUS[CVE-2026-23273] = "cpe-stable-backport: Backported in 6.18.14"
+
+CVE_STATUS[CVE-2026-23274] = "cpe-stable-backport: Backported in 6.18.19"
+
+CVE_STATUS[CVE-2026-23275] = "cpe-stable-backport: Backported in 6.18.19"
+
+CVE_STATUS[CVE-2026-23276] = "cpe-stable-backport: Backported in 6.18.19"
+
+CVE_STATUS[CVE-2026-23277] = "cpe-stable-backport: Backported in 6.18.19"
+
+CVE_STATUS[CVE-2026-23278] = "cpe-stable-backport: Backported in 6.18.19"
+
--
2.43.0