WARNING: libsndfile1-1.2.2-r0 do_cve_check: Found unpatched CVE (CVE-2024-50613 CVE-2025-52194)
WARNING: sqlite3-3_3.48.0-r0 do_cve_check: Found unpatched CVE (CVE-2025-29087 CVE-2025-3277 CVE-2025-6965)
WARNING: binutils-2.45-r0 do_cve_check: Found unpatched CVE (CVE-2025-11494 CVE-2025-11839 CVE-2025-11840)
WARNING: libpng-1.6.50-r0 do_cve_check: Found unpatched CVE (CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018)
WARNING: libpam-1.7.1-r0 do_cve_check: Found unpatched CVE (CVE-2024-10041)
WARNING: optee-client-4.7.0-r0 do_cve_check: Found unpatched CVE (CVE-2021-36133)
WARNING: glibc-2.42+git-r1 do_cve_check: Found unpatched CVE (CVE-2010-4756)
WARNING: qemu-native-10.0.6-r0 do_cve_check: Found unpatched CVE (CVE-2019-12067 CVE-2021-20255 CVE-2024-6519)
WARNING: binutils-cross-aarch64-2.45-r0 do_cve_check: Found unpatched CVE (CVE-2025-11494 CVE-2025-11839 CVE-2025-11840)
WARNING: sqlite3-native-3_3.48.0-r0 do_cve_check: Found unpatched CVE (CVE-2025-29087 CVE-2025-3277 CVE-2025-6965)
WARNING: u-boot-master-1_1.0-r0 do_cve_check: Found unpatched CVE (CVE-2017-3225 CVE-2017-3226 CVE-2018-1000205 CVE-2018-18439 CVE-2018-18440 CVE-2019-13103 CVE-2019-14192 CVE-2019-14193 CVE-2019-14194 CVE-2019-14195 CVE-2019-14196 CVE-2019-14197 CVE-2019-14198 CVE-2019-14199 CVE-2019-14200 CVE-2019-14201 CVE-2019-14202 CVE-2019-14203 CVE-2019-14204 CVE-2020-10648 CVE-2020-8432 CVE-2021-27097 CVE-2021-27138 CVE-2022-30767 CVE-2022-34835 CVE-2024-57254 CVE-2024-57255 CVE-2024-57256 CVE-2024-57257 CVE-2024-57258 CVE-2024-57259)
WARNING: linux-yocto-6.16.11+git-r0 do_cve_check: Found unpatched CVE (CVE-2008-4609 CVE-2010-4563 CVE-2019-14899 CVE-2021-3714 CVE-2021-3864 CVE-2022-0400 CVE-2022-1247 CVE-2022-38096 CVE-2022-4543 CVE-2023-3397 CVE-2023-3640 CVE-2023-39176 CVE-2023-39179 CVE-2023-39180 CVE-2023-4010 CVE-2023-6238 CVE-2023-6240 CVE-2023-6535)
Image CVE JSON report stored in: /workdir/build/yocto-ampliphy-master-2025-11-29-01-pinned/bitbake-builds/yocto-ampliphy-pinned/build/tmp/work/phyboard_pollux_imx8mp_3-phytec-linux/phytec-headless-image/1.0/deploy-phytec-headless-image-image-complete/phytec-headless-image-phyboard-pollux-imx8mp-3.rootfs-20251203142603.json
NOTE: Tasks Summary: Attempted 8170 tasks of which 7615 didn't need to be rerun and all succeeded.
NOTE: Writing buildhistory
NOTE: Writing buildhistory took: 3 seconds
NOTE: Generating JSON CVE summary
Complete CVE JSON report summary created at: /workdir/build/yocto-ampliphy-master-2025-11-29-01-pinned/bitbake-builds/yocto-ampliphy-pinned/build/tmp/log/cve/cve-summary.json

python3 /workdir/build/yocto-ampliphy-master-2025-11-29-01-pinned/bitbake-builds/yocto-ampliphy-pinned/layers/openembedded-core/scripts/contrib/improve_kernel_cve_report.py --spdx /workdir/build/yocto-ampliphy-master-2025-11-29-01-pinned/bitbake-builds/yocto-ampliphy-pinned/build/tmp/deploy/spdx/3.0.1/phyboard_pollux_imx8mp_3/recipes/recipe-linux-yocto.spdx.json --datadir /workdir/build/yocto-ampliphy-master-2025-11-29-01-pinned/bitbake-builds/yocto-ampliphy-pinned/layers/kernel-security-vulns --kernel-version 6.16.11

[improve_kernel_cve_report.py:441] Total compiled files 40917
[improve_kernel_cve_report.py:477] Checking kernel 6.16.11
[improve_kernel_cve_report.py:93] CVE-2024-0000 doesn't have good metadata
[improve_kernel_cve_report.py:93] CVE-2024-0053 doesn't have good metadata
[improve_kernel_cve_report.py:193] Total CVEs ignored due to not applicable config: 95
[improve_kernel_cve_report.py:194] Total CVEs not vulnerable due version-not-in-range: 8748
[improve_kernel_cve_report.py:195] Total vulnerable CVEs: 84
[improve_kernel_cve_report.py:197] Total CVEs already backported in 6.16: 2
[improve_kernel_cve_report.py:481] Total kernel cves from kernel CNA: 9177
[improve_kernel_cve_report.py:483] Total kernel before processing cves: 0
[improve_kernel_cve_report.py:491] Total kernel cves after processing: 9177