Trivy reported Kernel CVE CVE-2024-53103

[tomuben]

Background

Our Nightly build detected CVE-2024-53103.

Total: 1 (HIGH: 1, CRITICAL: 0)
┌────────────────┬────────────────┬──────────┬──────────┬───────────────────┬───────────────┬───────────────────────────────────────────────────────────┐
│    Library     │ Vulnerability  │ Severity │  Status  │ Installed Version │ Fixed Version │                           Title                           │
├────────────────┼────────────────┼──────────┼──────────┼───────────────────┼───────────────┼───────────────────────────────────────────────────────────┤
│ linux-libc-dev │ CVE-2024-53103 │ HIGH     │ affected │ 5.15.0-126.136    │               │ In the Linux kernel, the following vulnerability has been │
│                │                │          │          │                   │               │ resolved: h...                                            │
│                │                │          │          │                   │               │ https://avd.aquasec.com/nvd/cve-2024-53103                │
└────────────────┴────────────────┴──────────┴──────────┴───────────────────┴───────────────┴───────────────────────────────────────────────────────────┘

However, Kernel CVE's should be suppressed in the trivy.rego file:

ignore {
        input.PkgName == "linux-libc-dev"
        regex.match("^kernel:", input.Title)
}

=> Looks there is no other way to identify Kernel related CVE's. So, need to adjust the regular expression.

Acceptance Criteria

Security Scans should ignore CVE-2024-53103.