[openembedded-core][whinlatter][PATCH 06/18] linux-yocto/6.12: update CVE exclusions (6.12.74)

[bruce.ashfield@gmail.com]

From: Bruce Ashfield <bruce.ashfield@gmail.com>

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 1 changes (1 new | 0 updated): - 1 new CVEs: CVE-2026-2971 - 0 updated CVEs:
        Date: Mon, 23 Feb 2026 04:58:05 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
 .../linux/cve-exclusion_6.12.inc              | 48 +++++++++----------
 1 file changed, 24 insertions(+), 24 deletions(-)

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index 92a12f2c1f..c7726e1306 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,11 +1,11 @@
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2026-02-18 20:12:59.836870+00:00 for kernel version 6.12.73
-# From linux_kernel_cves cve_2026-02-18_1900Z-2-ge0bc67e5ce4
+# Generated at 2026-02-23 05:12:32.087151+00:00 for kernel version 6.12.74
+# From linux_kernel_cves cve_2026-02-23_0400Z-1-g3cbc7410733
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.73"
+    this_version = "6.12.74"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -20402,23 +20402,23 @@ CVE_STATUS[CVE-2025-71225] = "cpe-stable-backport: Backported in 6.12.70"
 
 CVE_STATUS[CVE-2025-71228] = "cpe-stable-backport: Backported in 6.12.70"
 
-# CVE-2025-71229 has no known resolution
+CVE_STATUS[CVE-2025-71229] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71230 has no known resolution
+CVE_STATUS[CVE-2025-71230] = "fixed-version: only affects 6.13 onwards"
 
-# CVE-2025-71231 has no known resolution
+CVE_STATUS[CVE-2025-71231] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71232 has no known resolution
+CVE_STATUS[CVE-2025-71232] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71233 has no known resolution
+CVE_STATUS[CVE-2025-71233] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71234 has no known resolution
+CVE_STATUS[CVE-2025-71234] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71235 has no known resolution
+CVE_STATUS[CVE-2025-71235] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71236 has no known resolution
+CVE_STATUS[CVE-2025-71236] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2025-71237 has no known resolution
+CVE_STATUS[CVE-2025-71237] = "cpe-stable-backport: Backported in 6.12.72"
 
 CVE_STATUS[CVE-2026-22976] = "cpe-stable-backport: Backported in 6.12.66"
 
@@ -20668,7 +20668,7 @@ CVE_STATUS[CVE-2026-23098] = "cpe-stable-backport: Backported in 6.12.68"
 
 CVE_STATUS[CVE-2026-23099] = "cpe-stable-backport: Backported in 6.12.68"
 
-CVE_STATUS[CVE-2026-23100] = "fixed-version: only affects 6.13 onwards"
+CVE_STATUS[CVE-2026-23100] = "cpe-stable-backport: Backported in 6.12.74"
 
 CVE_STATUS[CVE-2026-23101] = "cpe-stable-backport: Backported in 6.12.68"
 
@@ -20908,25 +20908,25 @@ CVE_STATUS[CVE-2026-23218] = "fixed-version: only affects 6.18 onwards"
 
 CVE_STATUS[CVE-2026-23219] = "cpe-stable-backport: Backported in 6.12.70"
 
-# CVE-2026-23220 has no known resolution
+CVE_STATUS[CVE-2026-23220] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2026-23221 has no known resolution
+CVE_STATUS[CVE-2026-23221] = "cpe-stable-backport: Backported in 6.12.74"
 
-# CVE-2026-23222 has no known resolution
+CVE_STATUS[CVE-2026-23222] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2026-23223 has no known resolution
+CVE_STATUS[CVE-2026-23223] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2026-23224 has no known resolution
+CVE_STATUS[CVE-2026-23224] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2026-23225 has no known resolution
+CVE_STATUS[CVE-2026-23225] = "fixed-version: only affects 6.19 onwards"
 
-# CVE-2026-23226 has no known resolution
+# CVE-2026-23226 needs backporting (fixed from 7.0rc1)
 
-# CVE-2026-23227 has no known resolution
+# CVE-2026-23227 needs backporting (fixed from 7.0rc1)
 
-# CVE-2026-23228 has no known resolution
+CVE_STATUS[CVE-2026-23228] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2026-23229 has no known resolution
+CVE_STATUS[CVE-2026-23229] = "cpe-stable-backport: Backported in 6.12.72"
 
-# CVE-2026-23230 has no known resolution
+CVE_STATUS[CVE-2026-23230] = "cpe-stable-backport: Backported in 6.12.72"
 
-- 
2.43.0