[openembedded-core][whinlatter][PATCH 08/18] linux-yocto/6.12: update CVE exclusions (6.12.76)

[bruce.ashfield@gmail.com]

From: Bruce Ashfield <bruce.ashfield@gmail.com>

Data pulled from: https://github.com/CVEProject/cvelistV5

    1/1 [
        Author: cvelistV5 Github Action
        Email: github_action@example.com
        Subject: 3 changes (2 new | 1 updated): - 2 new CVEs: CVE-2025-70031, CVE-2026-0846 - 1 updated CVEs: CVE-2025-7195
        Date: Mon, 9 Mar 2026 19:31:35 +0000

    ]

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
---
 .../linux/cve-exclusion_6.12.inc              | 30 ++++++++++++++-----
 1 file changed, 23 insertions(+), 7 deletions(-)

diff --git a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
index c7726e1306..60d337b010 100644
--- a/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
+++ b/meta/recipes-kernel/linux/cve-exclusion_6.12.inc
@@ -1,11 +1,11 @@
 
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at 2026-02-23 05:12:32.087151+00:00 for kernel version 6.12.74
-# From linux_kernel_cves cve_2026-02-23_0400Z-1-g3cbc7410733
+# Generated at 2026-03-09 19:34:33.465338+00:00 for kernel version 6.12.76
+# From linux_kernel_cves cve_2026-03-09_1900Z-1-gab0cca33c43
 
 
 python check_kernel_cve_status_version() {
-    this_version = "6.12.74"
+    this_version = "6.12.76"
     kernel_version = d.getVar("LINUX_VERSION")
     if kernel_version != this_version:
         bb.warn("Kernel CVE status needs updating: generated for %s but kernel is %s" % (this_version, kernel_version))
@@ -9032,6 +9032,8 @@ CVE_STATUS[CVE-2023-54326] = "fixed-version: Fixed from version 6.5"
 
 CVE_STATUS[CVE-2023-7324] = "fixed-version: Fixed from version 6.3"
 
+# CVE-2024-14027 needs backporting (fixed from 6.13)
+
 CVE_STATUS[CVE-2024-26581] = "fixed-version: Fixed from version 6.8"
 
 CVE_STATUS[CVE-2024-26582] = "fixed-version: Fixed from version 6.8"
@@ -20396,12 +20398,8 @@ CVE_STATUS[CVE-2025-71224] = "cpe-stable-backport: Backported in 6.12.70"
 
 CVE_STATUS[CVE-2025-71225] = "cpe-stable-backport: Backported in 6.12.70"
 
-# CVE-2025-71226 needs backporting (fixed from 6.19)
-
 # CVE-2025-71227 needs backporting (fixed from 6.19)
 
-CVE_STATUS[CVE-2025-71228] = "cpe-stable-backport: Backported in 6.12.70"
-
 CVE_STATUS[CVE-2025-71229] = "cpe-stable-backport: Backported in 6.12.72"
 
 CVE_STATUS[CVE-2025-71230] = "fixed-version: only affects 6.13 onwards"
@@ -20420,6 +20418,8 @@ CVE_STATUS[CVE-2025-71236] = "cpe-stable-backport: Backported in 6.12.72"
 
 CVE_STATUS[CVE-2025-71237] = "cpe-stable-backport: Backported in 6.12.72"
 
+CVE_STATUS[CVE-2025-71238] = "cpe-stable-backport: Backported in 6.12.74"
+
 CVE_STATUS[CVE-2026-22976] = "cpe-stable-backport: Backported in 6.12.66"
 
 CVE_STATUS[CVE-2026-22977] = "cpe-stable-backport: Backported in 6.12.66"
@@ -20930,3 +20930,19 @@ CVE_STATUS[CVE-2026-23229] = "cpe-stable-backport: Backported in 6.12.72"
 
 CVE_STATUS[CVE-2026-23230] = "cpe-stable-backport: Backported in 6.12.72"
 
+CVE_STATUS[CVE-2026-23231] = "cpe-stable-backport: Backported in 6.12.75"
+
+CVE_STATUS[CVE-2026-23232] = "fixed-version: only affects 6.19 onwards"
+
+CVE_STATUS[CVE-2026-23233] = "cpe-stable-backport: Backported in 6.12.74"
+
+CVE_STATUS[CVE-2026-23234] = "cpe-stable-backport: Backported in 6.12.74"
+
+CVE_STATUS[CVE-2026-23235] = "cpe-stable-backport: Backported in 6.12.74"
+
+CVE_STATUS[CVE-2026-23236] = "cpe-stable-backport: Backported in 6.12.74"
+
+CVE_STATUS[CVE-2026-23237] = "cpe-stable-backport: Backported in 6.12.74"
+
+CVE_STATUS[CVE-2026-23238] = "cpe-stable-backport: Backported in 6.12.74"
+
-- 
2.43.0