OK: 64 bit kernel-desktop-4.14.89-1 running on my workstation, with all updates in testing: i7-2600K, Nvidia GTX760 (GK104) using proprietary driver GeForce 420 and later, with CUDA & OpenCL detected OK in BOINC, / & /home & swap in LVM on LUKS on SSD, Plasma5.12 etc, Thunderbird, LibreOffice, video in Firefox,VirtualBox running MSW7 incl USB flash stick and windows updates,... All I tested on this machine is OK, and I keep using it.

CC: (none) => fri

x86_64, UEFI
Quad core Intel Core i7-4790 (-HT-MCP-)
nvidia GTX970 410.78
Stress tests, virtualbox OK.  NFS shares automounted on reboot/login.
Looks fine.

CC: (none) => tarazed25

Mga6 on real 32bit hardware desktop(lxde/lxqt DE system)

uname -r
4.14.78-desktop-1.mga6



$ lscpu
Architecture:          i686
CPU op-mode(s):        32-bit

AMD Athlon(tm) XP 2400+

Flags:                 fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
                       mca cmov pat pse36 mmx fxsr sse syscall mmxext 3dnowext 
                       3dnow cpuid 3dnowprefetch vmmcall

To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Updates Testing (distrib5)")
  cpupower                       4.14.89      1.mga6        i586    
  kernel-desktop-4.14.89-1.mga6  1            1.mga6        i586    
  kernel-desktop-latest          4.14.89      1.mga6        i586    
  kernel-userspace-headers       4.14.89      1.mga6        i586    
57MB of additional disk space will be used.
53MB of packages will be retrieved.
Proceed with the installation of the 4 packages? (Y/n) y



reboot

uname -r
4.14.89-desktop-1.mga6

usb memory device detected and pop-up requesting action.
VLC plays .mkv sound and video from usb memory device
firefox (firefox-52.2.0-1.mga6.i586) check web-mail -ok

CC: (none) => westel

on mga6-64  kernel-desktop  plasma

packages installed cleanly:
- cpupower-4.14.89-1.mga6.x86_64
- kernel-desktop-4.14.89-1.mga6-1-1.mga6.x86_64
- kernel-desktop-devel-4.14.89-1.mga6-1-1.mga6.x86_64
- kernel-desktop-devel-latest-4.14.89-1.mga6.x86_64
- kernel-desktop-latest-4.14.89-1.mga6.x86_64
- kernel-userspace-headers-4.14.89-1.mga6.x86_64
- virtualbox-kernel-4.14.89-desktop-1.mga6-5.2.22-5.mga6.x86_64
- virtualbox-kernel-desktop-latest-5.2.22-5.mga6.x86_64

system rebooted normally:
$ uname -r
4.14.89-desktop-1.mga6
# dkms status
virtualbox, 5.2.22-1.1.mga6, 4.14.89-desktop-1.mga6, x86_64: installed 
virtualbox, 5.2.22-1.1.mga6, 4.14.89-desktop-1.mga6, x86_64: installed-binary from 4.14.89-desktop-1.mga6

vbox and clients launched normally
Updated to kernel-desktop-4.14.89-1 on mga6-64 (plasma) and mga6-32 (plasma) clients - both relaunched normally. 

no regressions noted

OK for mga6-64 on this system:

Machine:   Device: desktop System: Dell product: Precision Tower 3620
           Mobo: Dell model: 09WH54 v: A00 UEFI [Legacy]: Dell v: 2.11.0 
CPU:       Quad core Intel Core i7-6700 (-HT-MCP-)
Graphics:  Card: Intel HD Graphics 530

CC: (none) => jim

Three laptops 64 bit mga6, all updated to everything in updates_testing.
In short: OK, minus on one laptop resume-from-hibernaiton regression

---

64 bit OK on laptop Thinkpad T60, CPU core2Duo T5600, ati RV515/M54 X1400, wifi AR5418, LVM on LUKS on SSD. 

Tested OK Resume from suspend and hibernation is OK incl wifi and video in firefox including audio.

---

64 bit OK on laptop Acer Aspire 7 A717-71G:
Intel i5, Nvidia and Intel GPU:s but only intel is configured, as per default in Mageia installer. Disk: nVME SSD, EFI boot, separate /boot, then rest of system in LVM lv:s in a LUKS encrypted pv.
Play video in firefox, other normal use...
Suspend-resume incl wifi etc works.
Hibernate-resume fail as it always has on this machine, Bug 22804.
As have been the case for months the built-in pad do not work but i think problem lies elswhere.

---

64 bit OK - minus resume from hibernation: laptop Thinkpad T61, with Nvidia GPU proprietary driver, LVM on SSD. This one is running MATE, all other are Plasma dektops.

Updated to all updates in all updates_testing repos.  All installed cleanly

Resume from suspend is OK incl wifi and video in firefox, BUT sound go missing on the video until i restart firefox. (as with previous kernels - i guess the problem lies elsewhere but have no time to dig...)

Regression: Resume from hibernation ends in completely unresponsive hang with black screen before DM login.

Running fine on Lenovo Ideapad Y500.
Intel Core i7-3630QM (-HT-MCP-)
nvidia GeForce GT 650M : 390.87

It took a while to get the nvidia card accepted, about six reboots.
The key was to get rid of a later backported kernel.

MGA6-32 MATE on IBM Thinkpad R50e
Installed
cpupower-4.14.89-1.mga6.i586.rpm
kernel-desktop-4.14.89-1.mga6-1-1.mga6.i586.rpm
kernel-desktop-latest-4.14.89-1.mga6.i586.rpm
kernel-doc-4.14.89-1.mga6.noarch.rpm
kernel-userspace-headers-4.14.89-1.mga6.i586.rpm
perf-4.14.89-1.mga6.i586.rpm
xtables-addons-kernel-4.14.89-desktop-1.mga6-2.13-75.mga6.i586.rpm
xtables-addons-kernel-desktop-latest-2.13-75.mga6.i586.rpm

After reboot checked odp, ods, doc, wav mp4 files from local and nfs folderd, all OK.
Newspaper site in Firefox displaying texr, pictures and video, all OK
Good enough for me.

CC: (none) => herman.viaene

I was going to add my penny's worth of testing, but find that I am already at:
 4.18.20-desktop-1.mga6
Ah. Len had the answer in comment 6:
> The key was to get rid of a later backported kernel.
Perhaps I shall do that (still have 4.14.78-1.mga6).

@Thomas From comment 0::
> ... advisory will follow.
Are you going to do the advisory? Or post it here for me or Dave to do?

@Morgan comment 5:
> updated to everything in updates_testing
> Updated to all updates in all updates_testing repos
This is normally a dicey thing to do, since other updates may upset the one in question.

CC: (none) => lewyssmith

On mga6-32   kernel-server  xfce

packages installed cleanly:
- cpupower-4.14.89-1.mga6.i586
- kernel-server-4.14.89-1.mga6-1-1.mga6.i586
- kernel-server-devel-4.14.89-1.mga6-1-1.mga6.i586
- kernel-server-devel-latest-4.14.89-1.mga6.i586
- kernel-server-latest-4.14.89-1.mga6.i586
- kernel-userspace-headers-4.14.89-1.mga6.i586

system re-booted normally:
$ uname -r
4.14.89-server-1.mga6

# dkms status
nvidia-current, 390.87-1.mga6.nonfree, 4.14.89-server-1.mga6, i586: installed

no regressions noted

OK for mga6-32 on this system:

Machine:   Device: desktop Mobo: ECS model: GeForce7050M-M v: 1.0
CPU:       Quad core AMD Phenom 9500 (-MCP-) cache: 2048 KB 
Graphics:  Card: NVIDIA GK208B [GeForce GT 710]

Trying M6/64

$ lscpu
Architecture:          x86_64
CPU(s):                2
Core(s) per socket:    2
Model name:            AMD E1-1200 APU with Radeon(tm) HD Graphics

cpupower-4.14.89-1.mga6
kernel-desktop-4.14.89-1.mga6-1-1.mga6
kernel-desktop-latest-4.14.89-1.mga6
kernel-userspace-headers-4.14.89-1.mga6

$ stress -t 20 -c 2 -i 10 -m 10 -d 10
stress: info: [15255] dispatching hogs: 2 cpu, 10 io, 10 vm, 10 hdd
stress: info: [15255] successful run completed in 24s

Running this kernel for a couple of hours' ad-hoc usage, video & sound OK. No problems noted, good for me.

On real hardware, HP Probook 6550b, i3, 9GB RAM, intel graphics, Intel wifi, on a 64-bit Plasma system.

Updated to kernel-desktop-4.14.80-1. All packages installed cleanly, after reboot, tried several apps, no regressions noted. Resume from hibernate OK.

CC: (none) => andrewsfarm

AMD x2-3800, Nvidia 6150le (nouveau driver)

Installed properly.

$ uname -a
Linux localhost 4.14.89-desktop-1.mga6 #1 SMP Mon Dec 17 14:56:00 UTC 2018 i686 i686 i686 GNU/Linux


Tools are working
WebServer working
libreoffice working

32-bit working as designed.

CC: (none) => brtians1

In a Vbox client, M6, Mate, 32-bit

Testing: kernel-desktop-latest vboxadditions-kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 4.14.78-desktop-1.mga6 #1 SMP Sun Oct 21 20:41:16 UTC 2018 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.78-1.mga6.i586 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.2.22-2.mga6.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-4.14.78-1.mga6.i586 is already installed

Install kernel-desktop-latest vboxadditions-kernel-desktop-latest cpupower from updates testing

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 4.14.89-desktop-1.mga6 #1 SMP Mon Dec 17 14:56:00 UTC 2018 i686 i686 i686 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.89-1.mga6.i586 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.2.22-5.mga6.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-4.14.89-1.mga6.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

In a Vbox client, M6, Mate, 64-bit

Testing: kernel-desktop-latest vboxadditions-kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 4.14.78-desktop-1.mga6 #1 SMP Sun Oct 21 20:31:12 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.78-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.2.22-2.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-4.14.78-1.mga6.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest vboxadditions-kernel-desktop-latest cpupower from updates testing

The following 5 packages are going to be installed:

- cpupower-4.14.89-1.mga6.x86_64
- kernel-desktop-4.14.89-1.mga6-1-1.mga6.x86_64
- kernel-desktop-latest-4.14.89-1.mga6.x86_64
- vboxadditions-kernel-4.14.89-desktop-1.mga6-5.2.22-5.mga6.x86_64
- vboxadditions-kernel-desktop-latest-5.2.22-5.mga6.x86_64

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 4.14.89-desktop-1.mga6 #1 SMP Mon Dec 17 13:14:48 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.89-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.2.22-5.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-4.14.89-1.mga6.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

No regressions found. Validating the update.

In reply to comment 8, tmb normally adds the advisory to svn for the kernels.

Argh. Collising accepted my comment but not my whiteboard/keyword additions.
Resubmitting them.

Whiteboard: (none) => MGA6-64-OK MGA6-32-OK
Keywords: (none) => validated_update
CC: (none) => davidwhodgins, sysadmin-bugs

Advisory, added to svn:

type: security
subject: Updated kernel packages fix security vulnerabilities
CVE:
 - CVE-2018-1128
 - CVE-2018-1129
 - CVE-2018-14625
 - CVE-2018-16862
 - CVE-2018-18397
 - CVE-2018-19824
src:
  6:
   core:
     - kernel-4.14.89-1.mga6
     - kernel-userspace-headers-4.14.89-1.mga6
     - kmod-vboxadditions-5.2.22-5.mga6
     - kmod-virtualbox-5.2.22-5.mga6
     - kmod-xtables-addons-2.13-75.mga6
description: |
  This kernel update is based on the upstream 4.14.89 and fixes atleast the
  following security issues:

  Cross-hyperthread Spectre v2 mitigation is now provided by the Single
  Thread Indirect Branch Predictors (STIBP) support. Note that STIBP also
  requires the functionality be supported by the Intel microcode in use.

  It was found that cephx authentication protocol did not verify ceph clients
  correctly and was vulnerable to replay attack. Any attacker having access
  to ceph cluster network who is able to sniff packets on network can use
  this vulnerability to authenticate with ceph service and perform actions
  allowed by ceph service (CVE-2018-1128).

  A flaw was found in the way signature calculation was handled by cephx
  authentication protocol. An attacker having access to ceph cluster network
  who is able to alter the message payload was able to bypass signature
  checks done by cephx protocol (CVE-2018-1129).

  A flaw was found in the Linux Kernel where an attacker may be able to have
  an uncontrolled read to kernel-memory from within a vm guest. A race
  condition between connect() and close() function may allow an attacker
  using the AF_VSOCK protocol to gather a 4 byte information leak or possibly
  intercept or corrupt AF_VSOCK messages destined to other clients
  (CVE-2018-14625).

  A security flaw was found in the Linux kernel in a way that the cleancache
  subsystem clears an inode after the final file truncation (removal). The
  new file created with the same inode may contain leftover pages from
  cleancache and the old file data instead of the new one (CVE-2018-16862).

  The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles
  access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing
  local users to write data into holes in a tmpfs file (if the user has
  read-only access to that file, and that file contains holes)
  (CVE-2018-18397).

  In the Linux kernel through 4.19.6, a local user could exploit a
  use-after-free in the ALSA driver by supplying a malicious USB Sound device
  (with zero interfaces) (CVE-2018-19824).

  For other uptstream fixes in this update, see the referenced changelogs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=24032
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.79
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.80
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.81
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.82
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.83
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.84
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.85
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.86
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.87
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.88
 - https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.89

Keywords: (none) => advisory

An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2018-0487.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED

On real hardware, M6, Plasma, 64-bit

initial install:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
kernel-desktop-devel-latest dkms-nvidia-current cpupower

The following 10 packages are going to be installed:

- dkms-virtualbox-5.2.18-1.mga6.noarch
- vboxadditions-kernel-4.14.70-desktop-2.mga6-5.2.18-6.mga6.x86_64
- vboxadditions-kernel-desktop-latest-5.2.18-6.mga6.x86_64
- virtualbox-5.2.18-1.mga6.x86_64
- virtualbox-doc-5.1.30-1.mga6.noarch
- virtualbox-guest-additions-5.2.18-1.mga6.x86_64
- virtualbox-kernel-4.14.70-desktop-2.mga6-5.2.18-6.mga6.x86_64
- virtualbox-kernel-desktop-latest-5.2.18-6.mga6.x86_64
- x11-driver-video-vboxvideo-5.2.18-1.mga6.x86_64
- xrandr-1.5.0-1.mga6.x86_64

[root@localhost wilcal]# uname -a
Linux localhost 4.14.70-desktop-2.mga6 #1 SMP Thu Sep 20 22:05:46 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.70-2.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.2.18-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.2.18-6.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.2.18-1.mga6.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.2.18-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.2.18-6.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.2.18-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-4.14.70-2.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-390.87-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-4.14.70-2.mga6.x86_64 is already installed
[root@localhost wilcal]# lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current
        
Using: Mageia-6.1-LiveDVD-Xfce-i586-DVD.iso
Create a Vbox client. Works just fine. Boots to a working desktop.

install from update_testing:
kernel-desktop-latest
virtualbox vboxadditions-kernel-desktop-latest dkms-virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo
kernel-desktop-devel-latest dkms-nvidia-current cpupower

The following 9 packages are going to be installed:

- cpupower-4.14.78-1.mga6.x86_64
- kernel-desktop-4.14.78-1.mga6-1-1.mga6.x86_64
- kernel-desktop-devel-4.14.78-1.mga6-1-1.mga6.x86_64
- kernel-desktop-devel-latest-4.14.78-1.mga6.x86_64
- kernel-desktop-latest-4.14.78-1.mga6.x86_64
- vboxadditions-kernel-4.14.78-desktop-1.mga6-5.2.18-10.mga6.x86_64
- vboxadditions-kernel-desktop-latest-5.2.18-10.mga6.x86_64
- virtualbox-kernel-4.14.78-desktop-1.mga6-5.2.18-10.mga6.x86_64
- virtualbox-kernel-desktop-latest-5.2.18-10.mga6.x86_64

[root@localhost wilcal]# uname -a
Linux localhost 4.14.78-desktop-1.mga6 #1 SMP Sun Oct 21 20:31:12 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-4.14.78-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-5.2.18-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi vboxadditions-kernel-desktop-latest
Package vboxadditions-kernel-desktop-latest-5.2.18-10.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-5.2.18-1.mga6.noarch is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-5.2.18-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-5.2.18-10.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-5.2.18-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-4.14.78-1.mga6.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-nvidia-current
Package dkms-nvidia-current-390.87-1.mga6.nonfree.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-4.14.78-1.mga6.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia_current
        
Mageia-6.1-LiveDVD-Xfce-i586-DVD.iso
Still works as a Vbox client. Boots to a working desktop.

Mageia-6.1-LiveDVD-GNOME-x86_64-DVD.iso
Create a Vbox client. Works just fine. Boots to a working desktop.

Mageia-6.1-LiveDVD-Plasma-x86_64-DVD.iso
Installs from boot menu as a Vbox client. Boots to a working desktop.
Updates then reboots back to a working desktop.

Test platform:
Intel Core i7-2600K Sandy Bridge 3.4GHz
GIGABYTE GA-Z68X-UD3-B3 LGA 1155 MoBo
GIGABYTE GV-N440D3-1GI Nvidia GeForce GT 440 (Fermi) 1GB
RTL8111/8168B PCI Express 1Gbit Ethernet
DRAM 16GB (4 x 4GB)