Bug 25185

Note that same kernel set is in use in Cauldron, so its already being tested.

I have also verified the "adding kernel side support for temperature monitoring on Ryzen 3000 series" on my Ryzen 3600

mga7, x86_64

10-Core: Intel Core i9-7900X type: MT MCP
Desktop Mobo: ASUSTeK model: TUF X299 MARK 2
NVIDIA GP102 [GeForce GTX 1080 Ti] - nvidia 430.26

Updates and rebooting to Mate desktop ran OK.
NFS shares mounted.  64-bit mga6 virtualbox guest launched to a working desktop.
Sound and video working in vlc, TV input also.  stress tests completed.  teapot and glxspheres64 ran with and without Sync to VBlank.  glmark2 failed with a GLX problem - needs separate bug report.

$ dkms status
nvidia-current, 430.26-1.mga7.nonfree, 5.1.20-desktop-2.mga7, x86_64: installed 
nvidia-current, 430.26-1.mga7.nonfree, 5.1.14-desktop-1.mga7, x86_64: installed 
xtables-addons, 3.3-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7
virtualbox, 6.0.10-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7
virtualbox, 6.0.8-1.mga7, 5.1.14-desktop-1.mga7, x86_64: installed-binary from 5.1.14-desktop-1.mga7

Good for 64bits on this machine.

CC: (none) => tarazed25

mga7, x86_64

Quad Core: Intel Core i7-4790 type: MT MCP
Desktop Mobo: MSI model: Z97-G43 (MS-7816)
NVIDIA GM204 [GeForce GTX 970] - nvidia 430.26

- bpftool-5.1.20-2.mga7.x86_64
- cpupower-5.1.20-2.mga7.x86_64
- cpupower-devel-5.1.20-2.mga7.x86_64
- kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64
- kernel-desktop-latest-5.1.20-2.mga7.x86_64
- kernel-doc-5.1.20-2.mga7.noarch
- kernel-userspace-headers-5.1.20-1.mga7.x86_64
- lib64bpf-devel-5.1.20-2.mga7.x86_64
- lib64bpf0-5.1.20-2.mga7.x86_64
- perf-5.1.20-2.mga7.x86_64
- virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64
- xtables-addons-kernel-5.1.20-desktop-2.mga7-3.3-56.mga7.x86_64
- xtables-addons-kernel-desktop-latest-3.3-56.mga7.x86_64

Clean update from desktop kernel 5.1.18.
Fast reboot to login.  Default boot was 5.1.20-desktop.

$ sudo dkms status | grep 5.1.20
nvidia-current, 430.26-1.mga7.nonfree, 5.1.20-desktop-2.mga7, x86_64: installed 
xtables-addons, 3.3-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7
virtualbox, 6.0.10-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7

c/m/i/d stress tests for 25 seconds each.
Everything else appears to be running normally.  Launched a couple of vbox clients successfully.  glmark2 is fine.

mga7, x86_64

Quad Core Intel Core i7-5700HQ (-MT MCP-)
Aorus: Laptop System: GIGABYTE product: X5
NVIDIA GM204M [GeForce GTX 965M] - nvidia 430.14

Working.  Recovers from closing and opening the lid.
wifi OK.   Overlapping stress tests ran to completion.
Bluetooth sound working eventually - TV soundbar paired and connected immediately but it took a lot of fiddling with pavucontrol before the device appeared as an option.  Playing Purcell via mplayer.

The only oddity with the desktop is the query on a red circle in the panel which remains even when media are set up and a specific mirror enabled.  Otherwise it works as expected.

on mga7-64  kernel-desktop  plasma

packages installed cleanly:
- cpupower-5.1.20-2.mga7.x86_64
- kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64
- kernel-desktop-latest-5.1.20-2.mga7.x86_64
- kernel-userspace-headers-5.1.20-1.mga7.x86_64
- virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64

system re-booted normally:

$ uname -r
5.1.20-desktop-2.mga7

# dkms status
virtualbox, 6.0.10-1.mga7, 5.1.20-desktop-2.mga7, x86_64: installed-binary from 5.1.20-desktop-2.mga7

vbox and clients launched normally

no regressions observed

looks OK for mga7-64 on this system:

Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 
CPU: Intel Core i7-6700
Graphics: Intel HD Graphics 530 (Skylake GT2)

also updated to 5.1.20-desktop586-2.mga7 in a 32 bit vbox VM - 
no regressions observed

CC: (none) => jim

$ uname -a
Linux localhost.localdomain 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux


A6 laptop

installed the following:


- cpupower-5.1.20-2.mga7.x86_64
- kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.1.20-2.mga7.x86_64

seems to be working as designed

CC: (none) => brtians1

AMD x3-450, Nvidia 730GT (390 nvidia proprietary driver)

- cpupower-5.1.20-2.mga7.x86_64
- kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64
- kernel-desktop-latest-5.1.20-2.mga7.x86_64
- kernel-firmware-nonfree-20190720-1.mga7.nonfree.noarch

$ uname -a
Linux localhost 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux

everything working as designed so far.

In a Vbox client, M7.1, Gnome, 32-bit

Testing: kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.1.18-desktop586-1.mga7 #1 SMP Sun Jul 14 10:08:40 UTC 2019 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.1.18-1.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.1.18-1.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop586-latest cpupower from updates testing

The following 3 packages are going to be installed:

- cpupower-5.1.20-2.mga7.i586
- kernel-desktop586-5.1.20-2.mga7-1-1.mga7.i586
- kernel-desktop586-latest-5.1.20-2.mga7.i586

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.1.20-desktop586-2.mga7 #1 SMP Fri Jul 26 23:03:59 UTC 2019 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.1.20-2.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.1.20-2.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

n a Vbox client, M7.1, Plasma, 64-bit

Testing: kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.1.18-desktop-1.mga7 #1 SMP Sun Jul 14 10:08:39 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.1.18-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.1.18-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower from updates testing

The following 3 packages are going to be installed:

- cpupower-5.1.20-2.mga7.x86_64
- kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.1.20-2.mga7.x86_64

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.1.20-2.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.1.20-2.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

On real hardware, M7.1, Plasma, 64-bit

initial status:

kernel-desktop-latest
virtualbox dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.1.18-desktop-1.mga7 #1 SMP Sun Jul 14 10:08:39 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.1.18-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-6.0.10-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-6.0.10-1.mga7.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-6.0.10-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.1.18-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.1.18-1.mga7.x86_64 is already installed
[root@localhost wilcal]# lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia390
        
Mageia-6.1-LiveDVD-Xfce-i586-DVD.iso
Create a Vbox client. Works just fine. Boots to a working desktop.

install from update_testing:

kernel-desktop-latest
virtualbox dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower

The following 7 packages are going to be installed:

- cpupower-5.1.20-2.mga7.x86_64
- kernel-desktop-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.1.20-2.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64
- kernel-desktop-latest-5.1.20-2.mga7.x86_64
- virtualbox-kernel-5.1.20-desktop-2.mga7-6.0.10-2.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.10-2.mga7.x86_64

[root@localhost wilcal]# uname -a
Linux localhost 5.1.20-desktop-2.mga7 #1 SMP Fri Jul 26 23:04:19 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.1.20-2.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-6.0.10-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-6.0.10-1.mga7.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-6.0.10-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.1.20-2.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.1.20-2.mga7.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia390
        
Mageia-6.1-LiveDVD-Xfce-i586-DVD.iso
Still works as a Vbox client. Boots to a working desktop.

Mageia-6.1-LiveDVD-GNOME-x86_64-DVD.iso
Create a Vbox client. Works just fine. Boots to a working desktop.

Mageia-7-x86_64.iso   (M7.1)
Installs as a Vbox client. Boots to a working desktop.
Updates then reboots back to a working desktop.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)

Advisory, added to svn:

type: security
subject: Updated kernel packages fix security vulnerability
src:
  7:
   core:
     - kernel-5.1.20-2.mga7
     - kernel-userspace-headers-5.1.20-1.mga7
     - kmod-virtualbox-6.0.10-2.mga7
     - kmod-xtables-addons-3.3-56.mga7
description: |
  This kernel update is based on the upstream 5.1.20 and fixes atleast
  the following security issue:

  With Xen, virtual device backends and device models running in domain 0,
  or other backend driver domains, need to be able to map guest memory
  (either via grant mappings, or via the foreign mapping interface). For
  Linux to keep track of these mappings, it needs to have a page structure
  for each one. In PV dom0, a range of pfns are typically set aside at boot
  (“pre-ballooned”) for this purpose; for PVH and Arm dom0s, no memory is
  set aside to begin with. In either case, when more of this “foreign / grant
  map pfn space” is needed, dom0 will balloon out extra pages to use for this
  purpose. Unfortunately, in Linux, there are no limits, either on the total
  amount of memory which dom0 will attempt to balloon down to, nor on the
  amount of “foreign / grant map” memory which any individual guest can
  consume. As a result, a malicious guest may be able, with crafted requests
  to the backend, to cause dom0 to exhaust its own memory, leading to a host
  crash; and if this is not possible, it may be able to monopolize all of the
  foreign / grant map pfn space, starving out other guests (XSA-300).

  Other changes in this update:
  - kernel configs:
    * enable Full dynticks system (tickless) (NO_HZ_FULL)
    * enable CONFIG_RCU_NOCB_CPU (mga#24701)
  - add kernel side support for temperature monitoring on Amd Ryzen 3000
    series (lm_sensors 3.5.0-2.1.mga7 or newer is also needed)

  For other upstream changes in this update, see the referenced changelogs.

  Note! This is the last update that is based on the upstream 5.1 series.
        Next update will be based on the upstream 5.2 series.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=25185
 - https://bugs.mageia.org/show_bug.cgi?id=24701
 - https://xenbits.xen.org/xsa/advisory-300.html
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.19
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.20
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.1.21

Keywords: (none) => advisory, validated_update
Whiteboard: (none) => MGA7-64-OK, MGA7-32-OK
CC: (none) => sysadmin-bugs

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2019-0217.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED