linuxKernels: ensure hardened kernels remain patched against CVE-2023-32233

      };

      kernelPatches = kernel.kernelPatches ++ [

        kernelPatches.hardened.${kernel.meta.branch}

      ] ++ lib.optionals (lib.versionAtLeast version "5.15") [

        # Needed as long as hardened kernels are behind the first patch release

        # containing the fix for CVE-2023-32233. Can most likely be removed after the

        # next hardened kernel update.

        kernelPatches.CVE-2023-32233

      ];

      isHardened = true;

  };