The do_git_apply() is called in do_patch_append(). The top directory of a WRL9 project is a git repo, which causes the 'git apply' in a package can't work.
$setup.sh .. $source oe-... $bitbake tcpdump The patch tcpdump-CVE-2016-7940.patch isn't applied.
