From 6a0c63f2490779cc17fde0caba5cfbec38724d91 Mon Sep 17 00:00:00 2001 From: Daniel Turull Date: Fri, 11 Sep 2026 10:23:45 -0300 Subject: [PATCH] improve_kernel_cve_report: validate that cve details field exists Check if the cve information has the details field to avoid crashing (From OE-Core rev: aff05d8a232ea2428c14087a7c5a89991b43bc2d) Signed-off-by: Daniel Turull Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie (cherry picked from commit 80ff4903ea1b839f9cd9393b314c3adfbb80b765) Signed-off-by: Yoann Congal Signed-off-by: Paul Barker --- scripts/contrib/improve_kernel_cve_report.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/contrib/improve_kernel_cve_report.py b/scripts/contrib/improve_kernel_cve_report.py index 3a15b1ed26..dc961d5938 100755 --- a/scripts/contrib/improve_kernel_cve_report.py +++ b/scripts/contrib/improve_kernel_cve_report.py @@ -362,7 +362,7 @@ def cve_update(cve_data, cve, entry): if entry['status'] == "Unpatched" and cve_data[cve]['status'] == "Patched": # Backported-patch (e.g. vendor kernel repo with cherry-picked CVE patch) # has priority over unpatch from CNA - if cve_data[cve]['detail'] == "backported-patch": + if "detail" in cve_data and cve_data[cve]['detail'] == "backported-patch": return logging.warning("CVE entry %s update from Patched to Unpatched from the scan result", cve) cve_data[cve] = copy_data(cve_data[cve], entry)