Re: [OE-core][scarthgap 41/66] linux-yocto/6.6: update CVE exclusions (6.6.123)

["Yoann Congal" <yoann.congal@smile.fr>]

On Fri Apr 24, 2026 at 10:55 PM CEST, Yoann Congal wrote:
> From: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com>
>
> This new version of cve-exclusion_6.6.inc was generated with oe-core's
> latest version of the generate-cve-exclusions.py.
>
> Regarding the database used and how this file was generated:
>
> Generated at 2026-04-03 09:30:32.247568+00:00 for kernel version 6.6.123
> From cvelistV5 cve_2026-04-03_0700Z
>
> The backporting of the generate-cve-exclusions.py script from master to
> Scarthgap is handled in a different patch.
>
> Signed-off-by: João Marcos Costa (Schneider Electric) <joaomarcos.costa@bootlin.com>
> Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
> ---
>  .../linux/cve-exclusion_6.6.inc               | 21144 +++++++++++++---
>  1 file changed, 17901 insertions(+), 3243 deletions(-)

Note: this patch triggers some tooling issues due to its size:
16167 – Missing (big) patch in patchwork
https://bugzilla.yoctoproject.org/show_bug.cgi?id=16167

You will find it on my branch here:
https://git.openembedded.org/openembedded-core-contrib/commit/?h=stable/scarthgap-nut&id=4bdf5345c32c9e294a64d61af49ce2adabdaf1db

Regards,
-- 
Yoann Congal
Smile ECS