topic Re: Patched CVEs database in i.MX Processors

Patched CVEs database

habib_farahani — Wed, 25 Jan 2023 17:57:02 GMT

Hello,

Recently, I upgraded the kernel on our i.MX6UL based board to 5.10.120. As I was going through CVE database in NVD, I realized some patches were already applied by NXP. Is there an internal database that maintains a list of applied patches by NXP so that I can focus only by the unapplied patches?

Thanks you in advance

Re: Patched CVEs database

habib_farahani — Wed, 25 Jan 2023 17:58:29 GMT

Incidentally, I have visited https://cve.report/vendor/nxp however, some of the patches that are already applied are not listed.

Re: Patched CVEs database

Bio_TICFSL — Thu, 26 Jan 2023 14:54:47 GMT

Hello

The CVE need to pass an strictly selection is probably that your patch simple not pass, you need to be a CNA, however is you want you can add our patches to https://www.cve.org/ResourcesSupport/Resources

Regards

Re: Patched CVEs database

habib_farahani — Mon, 30 Jan 2023 16:00:51 GMT

Hi,

Thanks for your reply! I think you misunderstood my question. I was wondering if NXP has implemented patches for any CVEs against Linix_kernel 5.10.120. If so, please share the CVE records with me . Not necessarily the patches.

Best,

Habib Farahani