Bug 25686 - Update request: kernel-5.3.11-1.mga7
Summary: Update request: kernel-5.3.11-1.mga7
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK, MGA7-32-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2019-11-13 12:00 CET by Thomas Backlund
Modified: 2019-11-20 13:43 CET (History)
10 users (show)

See Also:
Source RPM: kernel
CVE:
Status comment:


Attachments
Installed packages (5.20 KB, text/plain)
2019-11-18 15:55 CET, Ulrich Beckmann
Details

Description Thomas Backlund 2019-11-13 12:00:28 CET
smashing the latest ZombieLoad series cpu security issues, intel gpu security issues and other fixes...

SRPMS:
kernel-5.3.11-1.mga7.src.rpm
kmod-virtualbox-6.0.14-6.mga7.src.rpm
kmod-xtables-addons-3.5-9.mga7.src.rpm


i586:
bpftool-5.3.11-1.mga7.i586.rpm
cpupower-5.3.11-1.mga7.i586.rpm
cpupower-devel-5.3.11-1.mga7.i586.rpm
kernel-desktop-5.3.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-5.3.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-5.3.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-latest-5.3.11-1.mga7.i586.rpm
kernel-desktop586-latest-5.3.11-1.mga7.i586.rpm
kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop-devel-latest-5.3.11-1.mga7.i586.rpm
kernel-desktop-latest-5.3.11-1.mga7.i586.rpm
kernel-doc-5.3.11-1.mga7.noarch.rpm
kernel-server-5.3.11-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-5.3.11-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-latest-5.3.11-1.mga7.i586.rpm
kernel-server-latest-5.3.11-1.mga7.i586.rpm
kernel-source-5.3.11-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.3.11-1.mga7.noarch.rpm
kernel-userspace-headers-5.3.11-1.mga7.i586.rpm
libbpf0-5.3.11-1.mga7.i586.rpm
libbpf-devel-5.3.11-1.mga7.i586.rpm
perf-5.3.11-1.mga7.i586.rpm

virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.i586.rpm
virtualbox-kernel-5.3.11-desktop586-1.mga7-6.0.14-6.mga7.i586.rpm
virtualbox-kernel-5.3.11-server-1.mga7-6.0.14-6.mga7.i586.rpm
virtualbox-kernel-desktop586-latest-6.0.14-6.mga7.i586.rpm
virtualbox-kernel-desktop-latest-6.0.14-6.mga7.i586.rpm
virtualbox-kernel-server-latest-6.0.14-6.mga7.i586.rpm

xtables-addons-kernel-5.3.11-desktop-1.mga7-3.5-9.mga7.i586.rpm
xtables-addons-kernel-5.3.11-desktop586-1.mga7-3.5-9.mga7.i586.rpm
xtables-addons-kernel-5.3.11-server-1.mga7-3.5-9.mga7.i586.rpm
xtables-addons-kernel-desktop586-latest-3.5-9.mga7.i586.rpm
xtables-addons-kernel-desktop-latest-3.5-9.mga7.i586.rpm
xtables-addons-kernel-server-latest-3.5-9.mga7.i586.rpm



x86_64:
bpftool-5.3.11-1.mga7.x86_64.rpm
cpupower-5.3.11-1.mga7.x86_64.rpm
cpupower-devel-5.3.11-1.mga7.x86_64.rpm
kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-latest-5.3.11-1.mga7.x86_64.rpm
kernel-desktop-latest-5.3.11-1.mga7.x86_64.rpm
kernel-doc-5.3.11-1.mga7.noarch.rpm
kernel-server-5.3.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-5.3.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-latest-5.3.11-1.mga7.x86_64.rpm
kernel-server-latest-5.3.11-1.mga7.x86_64.rpm
kernel-source-5.3.11-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.3.11-1.mga7.noarch.rpm
kernel-userspace-headers-5.3.11-1.mga7.x86_64.rpm
lib64bpf0-5.3.11-1.mga7.x86_64.rpm
lib64bpf-devel-5.3.11-1.mga7.x86_64.rpm
perf-5.3.11-1.mga7.x86_64.rpm

virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64.rpm
virtualbox-kernel-5.3.11-server-1.mga7-6.0.14-6.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64.rpm
virtualbox-kernel-server-latest-6.0.14-6.mga7.x86_64.rpm

xtables-addons-kernel-5.3.11-desktop-1.mga7-3.5-9.mga7.x86_64.rpm
xtables-addons-kernel-5.3.11-server-1.mga7-3.5-9.mga7.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.5-9.mga7.x86_64.rpm
xtables-addons-kernel-server-latest-3.5-9.mga7.x86_64.rpm
Comment 1 James Kerr 2019-11-14 16:07:38 CET
on mga7-64  kernel-desktop  plasma

Packages installed cleanly:

- cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.3.11-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- kernel-userspace-headers-5.3.11-1.mga7.x86_64
- virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64

system re-booted normally:
$ uname -r
5.3.11-desktop-1.mga7

# dkms status
virtualbox, 6.0.14-1.mga7, 5.3.11-desktop-1.mga7, x86_64: installed 
virtualbox, 6.0.14-1.mga7, 5.3.7-desktop-4.mga7, x86_64: installed 
virtualbox, 6.0.14-1.mga7, 5.3.11-desktop-1.mga7, x86_64: installed-binary from 5.3.11-desktop-1.mga7
virtualbox, 6.0.14-1.mga7, 5.3.7-desktop-4.mga7, x86_64: installed-binary from 5.3.7-desktop-4.mga7

no regressions observed

looks OK for mga7-64 on this system:

Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 
CPU: Intel Core i7-6700
Graphics: Intel HD Graphics 530 (Skylake GT2)

vbox and client launched normally

updated to 5.3.11-desktop586 in a mga7 32 bit vbox VM - 
no regressions observed

CC: (none) => jim

Comment 2 Thomas Andrews 2019-11-14 17:33:17 CET
Hardware under test: Dell Inspiron 5100. 32-bit P4, 2GB RAM, Radeon 7500 (RV200) graphics, old Atheros wifi card, 32_bit Xfce system. Used the QArepo tool to download packages. A glibc package had already been updated during a previous update test.

The following 3 packages are going to be installed:

- cpupower-5.3.11-1.mga7.i586
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.i586
- kernel-desktop-latest-5.3.11-1.mga7.i586

All packages installed cleanly. After rebooting, no issues noted. Using it now to make this report. Looks OK for 32-bit on this hardware.

CC: (none) => andrewsfarm

Comment 3 Len Lawrence 2019-11-14 18:58:26 CET
Kernel linus and desktop updates on four machines after the new microcode.
Just a quick summary of installation and reboot.

CPU: Quad Core Intel Core i7-4790 (-MT MCP-)
NVIDIA GM204 [GeForce GTX 970] driver: nvidia v: 430.50
<>
Clean reboot for the desktop kernel.  System running fine with proprietary nvidia driver.

Legacy boot:
Alienware X51
Quad Core: Intel Core i7-2600 type: MT MCP speed: 1596 MHz
Intel 2nd Generation Core Processor Family Integrated Graphics 
NVIDIA GF114 [GeForce GTX 555] driver: nvidia v: 390.129
<>
Clean reboot for the desktop kernel.  System running fine with proprietary nvidia driver.  stress tests ran to completion.

CPU: 10-Core: Intel Core i9-7900X type: MT MCP speed: 1200 MHz
NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia v: 430.50
<>
Clean reboot for desktop kernel but in this case and every other case a cold reboot is required.  On a warm reboot the system hangs immediately after the initial selection - the black rectangle overlays the menu and the system becomes totally unresponsive.  First guess is that this might have something to do with the new microcode.

Asus X5 laptop
Quad Core Intel Core i7-5700HQ (-MT MCP-) 
GeForce GTX 965M/PCIe/SSE2 v: 4.6.0 NVIDIA 430.50
<>
Using the older microcode.
Desktop kernel installed and rebooted without rouble.  System running normally.

CC: (none) => tarazed25

Comment 4 William Kenney 2019-11-15 01:21:07 CET
In a Vbox client, M7.1, Gnome, 32-bit

Testing: kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.3.7-desktop586-4.mga7 #1 SMP Thu Oct 24 20:10:34 UTC 2019 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.3.7-4.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.3.7-4.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop586-latest cpupower from updates testing

The following 4 packages are going to be installed:

- cpupower-5.3.11-1.mga7.i586
- glibc-2.29-18.mga7.i586
- kernel-desktop586-5.3.11-1.mga7-1-1.mga7.i586
- kernel-desktop586-latest-5.3.11-1.mga7.i586

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.3.11-desktop586-1.mga7 #1 SMP Tue Nov 12 21:10:58 UTC 2019 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.3.11-1.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.3.11-1.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

Comment 5 William Kenney 2019-11-15 01:21:36 CET
In a Vbox client, M7.1, Plasma, 64-bit

Testing: kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.3.7-desktop-4.mga7 #1 SMP Thu Oct 24 20:11:12 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.3.7-4.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.3.7-4.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower from updates testing

The following 4 packages are going to be installed:

- cpupower-5.3.11-1.mga7.x86_64
- glibc-2.29-18.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.3.11-desktop-1.mga7 #1 SMP Tue Nov 12 21:10:01 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.3.11-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.3.11-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.
Comment 6 Len Lawrence 2019-11-15 02:12:15 CET
Mageia7, x86_64

Moved to another partition on the core i9 machine and installed the desktop kernel without any problems.  Warm reboot works here on sda5 but still fails on sda6.
Note, no new microcode on sda5.  Shall install it to see what happens.
Comment 7 William Kenney 2019-11-15 03:10:42 CET
On real hardware, M7.1, Plasma, 64-bit

initial status:

kernel-desktop-latest
virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower

kernel-desktop-latest 5.3.6.2
virtualbox 6.0.14.1
virtualbox-guest-additions 6.0.14,1
virtualbox-kernel-desktop-latest 6.0.14.1
x11-driver-video-vboxvideo 1.0.0.5
kernel-desktop-devel-latest 5.3.6.2  5.3.7.1
cpupower 5.3.6.2  5.3.7.1

[root@localhost wilcal]# uname -a
Linux localhost 5.3.7-desktop-4.mga7 #1 SMP Thu Oct 24 20:11:12 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.3.7-4.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-6.0.14-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.3.7-4.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.3.7-4.mga7.x86_64 is already installed
[root@localhost wilcal]# lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia390
        
Mageia-7-Live-Xfce-i586.iso
Create a Vbox client. Works just fine. Boots to a working desktop.

install from update_testing:

kernel-desktop-latest
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower

The following 9 packages are going to be installed:

- cpupower-5.3.11-1.mga7.x86_64
- glibc-2.29-18.mga7.x86_64
- glibc-devel-2.29-18.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.3.11-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64

[root@localhost wilcal]# uname -a
Linux localhost 5.3.11-desktop-1.mga7 #1 SMP Tue Nov 12 21:10:01 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.3.11-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-guest-additions
Package virtualbox-guest-additions-6.0.14-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.3.11-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.3.11-1.mga7.x86_64 is already installed
[wilcal@localhost ~]$ lspci -k
01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 440] (rev a1)
        Subsystem: Gigabyte Technology Co., Ltd Device 3518
        Kernel driver in use: nvidia
        Kernel modules: nvidiafb, nouveau, nvidia_drm, nvidia390
        
Mageia-7-Live-Xfce-i586.iso
Still works as a Vbox client. Boots to a working desktop.

Mageia-7-Live-GNOME-x86_64.iso
Create a Vbox client. Works just fine. Boots to a working desktop.

Mageia-7-x86_64.iso
Installs as a Vbox client. Boots to a working desktop.
Updates then reboots back to a working desktop.
Comment 8 Brian Rockwell 2019-11-15 15:18:09 CET
AMD x3 - Nvidia 730GT (390 driver)

CC: (none) => brtians1

Comment 9 Brian Rockwell 2019-11-15 15:18:55 CET
(In reply to Brian Rockwell from comment #8)
> AMD x3 - Nvidia 730GT (390 driver)

Installed

- cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.3.11-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64

No regressions - I also installed the new 390 driver afterwards - so tested before the driver update and after.
Comment 10 Thomas Andrews 2019-11-15 15:37:57 CET
Hardware under test: HP Probook 6550b, i3, 8GB RAM, integrated Intel graphics, Intel wifi, 64-bit Plasma system.

The following 7 packages are going to be installed:

- cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- kernel-userspace-headers-5.3.11-1.mga7.x86_64
- microcode-0.20191112-1.mga7.nonfree.noarch
- virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64

All packages updated cleanly. Upon rebooting, I tried the usual suspects, including running a Windows XP guest in VirtualBox. No issues noted, except for the usual scolding by XP because my anti-malware database was out of date.

Looks OK on this hardware.
Comment 11 Herman Viaene 2019-11-15 16:10:07 CET
MGA7-64 Plasma on Lenovo B50
No installation issues, installed desktop version plus the other not-kernel items in the list.
After rebooting, all usual stuff (different file types, internet, access to NFS shares) all OK.

CC: (none) => herman.viaene

Comment 12 Thomas Andrews 2019-11-15 17:17:18 CET
Hardware under test: AMD Athlon X2 7750, 8GB RAM, Geforce 210 (nvidia340) graphics, Atheros wifi, 64-bit Plasma system.

The following 9 packages are going to be installed:

- cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.3.11-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- kernel-userspace-headers-5.3.11-1.mga7.x86_64
- microcode-0.20191112-1.mga7.nonfree.noarch
- virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64

All packages installed cleanly, using the QA Repo tool, so the glibc package waiting in updates testing was not pulled in.

After a reboot, once again tried all the usual suspects, including the Windows XP guest in VirtualBox. Also installed Google Earth Pro, and ran it. No issues noted.

Looks good for 64-bit on this on this hardware.
Comment 13 Brian Rockwell 2019-11-15 20:47:34 CET
Vbox - mate - 32bit

$ uname -a
Linux localhost 5.3.11-server-1.mga7 #1 SMP Wed Nov 13 01:33:58 UTC 2019 i686 i686 i386 GNU/Linux



The following 3 packages are going to be installed:

- cpupower-5.3.11-1.mga7.i586
- kernel-server-5.3.11-1.mga7-1-1.mga7.i586
- kernel-server-latest-5.3.11-1.mga7.i586


----

Ran apache and nextcloud with the server kernel.  All seems to be working.

Also tested user apps, they work as well.
Comment 14 Thomas Andrews 2019-11-15 23:18:09 CET
Same hardware as in Comment 12, but with a 32-bit Plasma install.

The following 7 packages are going to be installed:

- cpupower-5.3.11-1.mga7.i586
- kernel-server-5.3.11-1.mga7-1-1.mga7.i586
- kernel-server-devel-5.3.11-1.mga7-1-1.mga7.i586
- kernel-server-devel-latest-5.3.11-1.mga7.i586
- kernel-server-latest-5.3.11-1.mga7.i586
- kernel-userspace-headers-5.3.11-1.mga7.i586
- microcode-0.20191112-1.mga7.nonfree.noarch

All packages installed cleanly. Nvidia driver modules built and installed properly. After reboot, again tried the usual suspects, with no issues noted.

Looks OK for 32-bit on this hardware.
Comment 15 Thomas Andrews 2019-11-16 21:09:41 CET
Hardware under test: Dell Dimension e520, Core 2 Quad Q6600, 4GB RAM, onboard Intel graphics, Realtek usb wifi dongle, 64-bit Plasma system.

The following 6 packages are going to be installed:

- cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- microcode-0.20191112-1.mga7.nonfree.noarch
- virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64

All packages installed cleanly. Upon rebooting, no issues noted. Looks OK on this hardware.
Comment 16 PC LX 2019-11-17 00:27:34 CET
Installed and tested without issues.

Tested for two days of workstation usage plus some steam games and extra testing (e.g. glmark2).

System: Mageia 7, x86_64, Intel Core2 Quad Q9400, nVidia GPU Geforce 210 using nvidia340 proprietary driver, sddm DM, Plasma DE, LXQt DE.

$ uname -a
Linux marte 5.3.11-desktop-1.mga7 #1 SMP Tue Nov 12 21:10:01 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
$ rpm -qa | grep -- -5.3.11- | sort -u
cpupower-5.3.11-1.mga7
kernel-desktop-5.3.11-1.mga7-1-1.mga7
kernel-desktop-devel-5.3.11-1.mga7-1-1.mga7
kernel-desktop-devel-latest-5.3.11-1.mga7
kernel-desktop-latest-5.3.11-1.mga7
kernel-userspace-headers-5.3.11-1.mga7
perf-5.3.11-1.mga7
$ lspcidrake
ehci_pci        : Intel Corporation|NM10/ICH7 Family USB2 EHCI Controller [SERIAL_USB] (rev: 01)
Card:NVIDIA GeForce 8100 to GeForce 415: NVIDIA Corporation|GT218 [GeForce 210] [DISPLAY_VGA] (rev: a2)
uhci_hcd        : Intel Corporation|NM10/ICH7 Family USB UHCI Controller #1 [SERIAL_USB] (rev: 01)
uhci_hcd        : Intel Corporation|NM10/ICH7 Family USB UHCI Controller #3 [SERIAL_USB] (rev: 01)
ata_piix        : Intel Corporation|82801G (ICH7 Family) IDE Controller [STORAGE_IDE] (rev: 01)
unknown         : Intel Corporation|NM10/ICH7 Family PCI Express Port 2 [BRIDGE_PCI] (rev: 01)
unknown         : Intel Corporation|4 Series Chipset DRAM Controller [BRIDGE_HOST] (rev: 03)
i2c_i801        : Intel Corporation|NM10/ICH7 Family SMBus Controller [SERIAL_SMBUS] (rev: 01)
unknown         : Intel Corporation|82801 PCI Bridge [BRIDGE_PCI] (rev: e1)
snd_hda_intel   : Intel Corporation|NM10/ICH7 Family High Definition Audio Controller [MULTIMEDIA_AUDIO_DEV] (rev: 01)
r8169           : Realtek Semiconductor Co., Ltd.|RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller [NETWORK_ETHERNET] (rev: 11)
snd_hda_intel   : NVIDIA Corporation|High Definition Audio Controller [MULTIMEDIA_AUDIO_DEV] (rev: a1)
uhci_hcd        : Intel Corporation|NM10/ICH7 Family USB UHCI Controller #2 [SERIAL_USB] (rev: 01)
unknown         : Intel Corporation|4 Series Chipset PCI Express Root Port [BRIDGE_PCI] (rev: 03)
intel_rng       : Intel Corporation|82801GB/GR (ICH7 Family) LPC Interface Bridge [BRIDGE_ISA] (rev: 01)
uhci_hcd        : Intel Corporation|NM10/ICH7 Family USB UHCI Controller #4 [SERIAL_USB] (rev: 01)
unknown         : Intel Corporation|NM10/ICH7 Family PCI Express Port 1 [BRIDGE_PCI] (rev: 01)
ata_piix        : Intel Corporation|NM10/ICH7 Family SATA Controller [IDE mode] [STORAGE_IDE] (rev: 01)
hub             : Linux 5.3.11-desktop-1.mga7 ehci_hcd|EHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hub             : Genesys Logic, Inc.|USB2.0 Hub [Hub|Unused|Full speed (or root) hub]
usbhid          : Sunplus Technology Co., Ltd|USB Laser Wheel Mouse [Human Interface Device|Boot Interface Subclass|Mouse]
usbhid          : USB|USB Keykoard [Human Interface Device|Boot Interface Subclass|Keyboard]
usb_storage     : Generic|Mass Storage Device [Mass Storage|SCSI|Bulk-Only]
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]
Mouse:evdev     : Logitech|USB Receiver [Human Interface Device|Boot Interface Subclass|Keyboard]
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hid_generic     : Logitech USB Receiver
hid_generic     : USB USB Keykoard
hid_generic     : Logitech Wireless Mouse PID:003f
hid_generic     : Logitech USB Receiver
hid_generic     : USB Laser Wheel Mouse
hid_generic     : USB USB Keykoard
hid_generic     : Logitech Wireless Keyboard PID:0055

CC: (none) => mageia

Comment 17 PC LX 2019-11-17 00:53:09 CET
Installed and tested on QEMU/KVM VM guest without issue.

Tested for several hours and reboots. OpenGL, video, audio, network, host shared directory, all worked.  No regressions noticed.

Host system: see comment 16.
Guest system: Mageia 7, x86_64, 2GiB RAM, Intel Core2 Duo p9xxx, sddm DM, LXQt DE.



$ uname -a
Linux marte-vm-mageia-7 5.3.11-desktop-1.mga7 #1 SMP Tue Nov 12 21:10:01 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
$ systemd-detect-virt 
kvm
$ rpm -qa | grep -- -5.3.11- | sort -u
cpupower-5.3.11-1.mga7
kernel-desktop-5.3.11-1.mga7-1-1.mga7
kernel-desktop-latest-5.3.11-1.mga7
kernel-userspace-headers-5.3.11-1.mga7
perf-5.3.11-1.mga7
$ lspcidrake 
uhci_hcd        : Intel Corporation|82801I (ICH9 Family) USB UHCI Controller #1 [SERIAL_USB] (rev: 03)
Card:Virtio virtual video card: Red Hat, Inc.|Virtio GPU [DISPLAY_VGA] (rev: 01)
uhci_hcd        : Intel Corporation|82801I (ICH9 Family) USB UHCI Controller #3 [SERIAL_USB] (rev: 03)
virtio_pci      : Red Hat, Inc.|Virtio RNG
virtio_pci      : Red Hat, Inc.|Virtio block device [STORAGE_SCSI]
ata_piix        : Intel Corporation|82371SB PIIX3 IDE [Natoma/Triton II] [STORAGE_IDE]
virtio_pci      : Red Hat, Inc.|Virtio network device [NETWORK_ETHERNET]
i2c_piix4       : Intel Corporation|82371AB/EB/MB PIIX4 ACPI [BRIDGE_OTHER] (rev: 03)
unknown         : Intel Corporation|440FX - 82441FX PMC [Natoma] [BRIDGE_HOST] (rev: 02)
uhci_hcd        : Intel Corporation|82801I (ICH9 Family) USB UHCI Controller #2 [SERIAL_USB] (rev: 03)                                                                                        
virtio_pci      : Red Hat, Inc.|Virtio memory balloon                                                                                                                                         
snd_hda_intel   : Intel Corporation|82801I (ICH9 Family) HD Audio Controller [MULTIMEDIA_AUDIO_DEV] (rev: 03)                                                                                 
unknown         : Intel Corporation|82371SB PIIX3 ISA [Natoma/Triton II] [BRIDGE_ISA]                                                                                                         
ehci_pci        : Intel Corporation|82801I (ICH9 Family) USB2 EHCI Controller #1 [SERIAL_USB] (rev: 03)                                                                                       
virtio_pci      : Red Hat, Inc.|Virtio filesystem                                                                                                                                             
hub             : Linux 5.3.11-desktop-1.mga7 ehci_hcd|EHCI Host Controller [Hub|Unused|Full speed (or root) hub]                                                                             
usbhid          : QEMU|QEMU USB Tablet [Human Interface Device|No Subclass|None]                                                                                                              
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]                                                                             
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]                                                                             
hub             : Linux 5.3.11-desktop-1.mga7 uhci_hcd|UHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hid_generic     : QEMU QEMU USB Tablet
Comment 18 Thomas Andrews 2019-11-17 01:56:51 CET
Hardware: i5 2500 (Sandy Lake), 16GB RAM, Intel graphics, wired Internet, 64-bit Plasma system.

The following 7 packages are going to be installed:

- cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- kernel-userspace-headers-5.3.11-1.mga7.x86_64
- microcode-0.20191112-1.mga7.nonfree.noarch
- virtualbox-kernel-5.3.11-desktop-1.mga7-6.0.14-6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.14-6.mga7.x86_64

All packages installed cleanly. After reboot, no regressions noted.
Comment 19 Brian Rockwell 2019-11-17 02:25:18 CET
AMD A6 - APU (Radeon R4 graphics) - hardware

installed the following

 cpupower-5.3.11-1.mga7.x86_64
- kernel-desktop-5.3.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.3.11-1.mga7.x86_64
- microcode-0.20191112-1.mga7.nonfree.noarch

Rebooted the machine

---

libreoffice, web-browser, networking, suspend mode are all working properly

Seems to be functioning to me.
Comment 20 Ben McMonagle 2019-11-18 08:25:53 CET
Mga7 on real 32bit hardware desktop(Xfce DE system)

$ uname -r
5.3.7-desktop586-4.mga7


$ lscpu
Architecture:          i686
CPU op-mode(s):        32-bit

AMD Athlon(tm) XP 2400+

Flags:                 fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
                       mca cmov pat pse36 mmx fxsr sse syscall mmxext 3dnowext 
                       3dnow cpuid 3dnowprefetch vmmcall

To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Updates Testing")
  cpupower                       5.3.11       1.mga7        i586    
  kernel-desktop586-5.3.11-1.mg> 1            1.mga7        i586    
  kernel-desktop586-latest       5.3.11       1.mga7        i586    
  kernel-userspace-headers       5.3.11       1.mga7        i586    
(medium "Nonfree Updates Testing")
  microcode                      0.20191112   1.mga7.nonfr> noarch

65MB of additional disk space will be used.
58MB of packages will be retrieved.
Proceed with the installation of the 5 packages? (Y/n) 

reboot

$ uname -r
5.3.11-desktop586-1.mga7

firefox - ok
USB stick detected and popup - ok
audio playback (VLC) from usb - ok

CC: (none) => westel

Comment 21 Ulrich Beckmann 2019-11-18 15:55:13 CET
Created attachment 11367 [details]
Installed packages

Kernel panic at shutdown/reboot!

I get the messages
Reached target Power-Off.
... Monitoring of LVM2 mirrors, snapshots etc. using dmeventd or progress polling ..
Kernel panic - not syncing: Attempted to kill init! exitcode=0x00007f00
CPU: 2 PID: 1 Comm: shutdown Not tainted 5.3.11-desktop-1.mga7 #1
Hardware name: Sony Corporation SVE1713G4E/VAIO, BIOS R0170D6 03/13/2012

This kernel panic occurs with all 3 installed kernels, also 5.3.7-desktop-4, whereas in another instance on the same hardware 5.3.7-desktop-4 is ok.

Ulrich

CC: (none) => bequimao.de

Comment 22 Len Lawrence 2019-11-18 17:32:36 CET
@Ulrich, comment 21

This is beginning to look suspicious.  I had a problem with warm reboots for one update to 5.3.11-desktop-1.  The reboot failed and no other partition could be booted past the initial menu either unless the machine was shutdown.  On another partition on the same hardware with the same kernel this did not happen.  Warm reboots worked for that partition and any other.  The behaviour was consistent after re-installing 5.7.11 on the "bad" partition, which had been reformatted.
Not inclined to use the system on the "bad" partition for testing because cold reboots are inconvenient and too many may not be good for the machine.  Not exactly the same problem as yours but in the same area.

I have not seen any problems with 5.3.7-desktop-4 so far.

Len
Comment 23 PC LX 2019-11-18 17:52:42 CET
(In reply to Ulrich Beckmann from comment #21)
> Kernel panic at shutdown/reboot!

What version of systemd do you have installed?

I'm seeing something very similar since I updated to systemd 241-8.4 on both the more recent kernel 5.3.11 and the previous kernel 5.3.7.

At the end of the day, I will test downgrading systemd to the previous version 241-8.2 and see if the problem is resolved.
Comment 24 Thomas Andrews 2019-11-18 18:53:08 CET
I'm using systemd 241-8.4 on three very different systems, with no problems, as reported in Bug 25404. In each case though, I had updated the kernel BEFORE I did systemd. If it is believed to be suspect, I can certainly rescind the validation of that bug.

Also, all tests were done with the QA Repo tool, so in all cases but one the glibc package in testing but not yet sent to QA was NOT installed. The one exception was the 32-bit Inspiron, where use of the QA Repo tool was impossible when testing a previous update, so glibc was pulled in that time.

I did a cold boot when testing the kernel on the Inspiron, and I did notice a very long time before it finally shut down, but I've seen that before on this hardware, many times. Once it reboots, that symptom always goes away, so I have always thought it a quirk of this very old hardware.
Comment 25 Len Lawrence 2019-11-18 19:21:17 CET
This machine is fairly new, Intel Core i9, but I still see long reboot times.  Lost my chance to update systemd - using 241-8.2 currently.
Comment 26 Thomas Backlund 2019-11-18 20:00:14 CET
For those that have reboot issues, try:

urpmi --downgrade cpio-2.12-5.mga7


There is a bug in that update showing up for some.

I've managed to reproduce it and am currently bisecting it
Comment 27 Thomas Backlund 2019-11-18 21:31:48 CET
Or test with cpio-2.13-1.1.mga7 (currently building)
Comment 28 Ben McMonagle 2019-11-19 07:47:26 CET
Mga7 xfce  / linx-7 tablet 32bit

# lscpu
Architecture:        i686
CPU op-mode(s):      32-bit, 64-bit

Model name:          Intel(R) Atom(TM) CPU  Z3735G @ 1.33GHz

Flags:               fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca 
cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx rdtscp lm 
constant_tsc arch_perfmon pebs bts xtopology tsc_reliable nonstop_tsc cpuid 
aperfmperf tsc_known_freq pni pclmulqdq dtes64 monitor ds_cpl vmx est tm2 
ssse3 cx16 xtpr pdcm sse4_1 sse4_2 movbe popcnt tsc_deadline_timer aes 
rdrand lahf_lm 3dnowprefetch epb ibrs ibpb stibp tpr_shadow vnmi flexpriority
 ept vpid tsc_adjust smep erms dtherm ida arat md_clear

# lspcidrake
lpc_ich         : Intel Corporation|Atom Processor Z36xxx/Z37xxx Series Power Control Unit [BRIDGE_ISA] (rev: 0f)
xhci_pci        : Intel Corporation|Atom Processor Z36xxx/Z37xxx, Celeron N2000 Series USB xHCI [SERIAL_USB] (rev: 0f)
Card:Intel 810 and later: Intel Corporation|Atom Processor Z36xxx/Z37xxx Series Graphics & Display [DISPLAY_VGA] (rev: 0f)
mei_txe         : Intel Corporation|Atom Processor Z36xxx/Z37xxx Series Trusted Execution Engine [CRYPT_OTHER] (rev: 0f)
intel_atomisp2_pm: Intel Corporation|Atom Processor Z36xxx/Z37xxx Series Camera ISP [MULTIMEDIA_OTHER] (rev: 0f)
unknown         : Intel Corporation|Atom Processor Z36xxx/Z37xxx Series SoC Transaction Register [BRIDGE_HOST] (rev: 0f)
hub             : Linux 5.3.7-desktop586-4.mga7 xhci-hcd|xHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hub             : Unknown Manufacturer|USB2.0 HUB [Hub|Unused|Full speed (or root) hub]
usbhid          : Logitech|USB Optical Mouse [Human Interface Device|Boot Interface Subclass|Mouse]
usbhid          : Logitech|USB Keyboard [Human Interface Device|Boot Interface Subclass|Keyboard]
hub             : Linux 5.3.7-desktop586-4.mga7 xhci-hcd|xHCI Host Controller [Hub|Unused|Full speed (or root) hub]
hid_generic     : Logitech USB Keyboard
hid_generic     : Logitech USB Optical Mouse
hid_generic     : Logitech USB Keyboard


$ uname -r
5.3.7-desktop586-4.mga7

To satisfy dependencies, the following packages are going to be installed:
  Package                        Version      Release       Arch    
(medium "Core Updates Testing (distrib5)")
  cpupower                       5.3.11       1.mga7        i586    
  kernel-desktop586-5.3.11-1.mg> 1            1.mga7        i586    
  kernel-desktop586-latest       5.3.11       1.mga7        i586    
  kernel-userspace-headers       5.3.11       1.mga7        i586    
(medium "Nonfree Updates Testing (distrib15)")
  microcode                      0.20191112   1.mga7.nonfr> noarch  
65MB of additional disk space will be used.
58MB of packages will be retrieved.
Proceed with the installation of the 5 packages? (Y/n) y

reboot

$ uname -r
5.3.11-desktop586-1.mga7


wifi at desktop -ok.
firefox -ok
USB stick detected and file browserr popup
VLC video and audio playback of .mkv file - ok
Comment 29 Thomas Backlund 2019-11-19 20:03:12 CET
Advisory, added to svn:

type: security
subject: Updated kernel packages fix security vulnerabilities
CVE:
 - CVE-2019-0155
 - CVE-2019-11135
 - CVE-2018-12207
src:
  7:
   core:
     - kernel-5.3.11-1.mga7
     - kmod-virtualbox-6.0.14-6.mga7
     - kmod-xtables-addons-3.5-9.mga7
description: |
  This kernel update is based on the upstream 5.3.13 and fixes atleast the 
  following security issues:

  Insufficient access control in a subsystem for Intel (R) processor graphics
  may allow an authenticated user to potentially enable escalation of
  privilege via local access (CVE-2019-0155).

  TSX Asynchronous Abort condition on some CPUs utilizing speculative
  execution may allow an authenticated user to potentially enable
  information disclosure via a side channel with local access
  (CVE-2019-11135).

  Improper invalidation for page table updates by a virtual guest operating
  system for multiple Intel(R) Processors may allow an authenticated user to
  potentially enable denial of service of the host system via local access
  (CVE-2018-12207). 

  For proper mitigations and fixes for theese issues, a microcode update is
  also needed, either with a bios/uefi update from your hardware vendor or
  by installing the microcode-0.20191112-1.mga7.nonfree update (mga#25688).

  For other upstream fixes in this update, see the referenced changelogs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=25686
 - https://bugs.mageia.org/show_bug.cgi?id=25688
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.8
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.9
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.10
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.3.11

Keywords: (none) => advisory, validated_update
Whiteboard: (none) => MGA7-64-OK, MGA7-32-OK
CC: (none) => sysadmin-bugs

Comment 30 Ulrich Beckmann 2019-11-19 20:08:15 CET
(In reply to Thomas Backlund from comment #26)
> For those that have reboot issues, try:
> 
> urpmi --downgrade cpio-2.12-5.mga7
> 
> 
> There is a bug in that update showing up for some.
> 
> I've managed to reproduce it and am currently bisecting it

Downgraded cpio as recommended or set # dnf versionlock add cpio.

The kernel panic as of https://bugs.mageia.org/show_bug.cgi?id=25686#c21 is resolved on all instances.

Thanks
Ulrich
Comment 31 Thomas Backlund 2019-11-19 20:48:26 CET
(In reply to Ulrich Beckmann from comment #30)
> (In reply to Thomas Backlund from comment #26)
> > For those that have reboot issues, try:
> > 
> > urpmi --downgrade cpio-2.12-5.mga7
> > 
> > 
> > There is a bug in that update showing up for some.
> > 
> > I've managed to reproduce it and am currently bisecting it
> 
> Downgraded cpio as recommended or set # dnf versionlock add cpio.
> 
> The kernel panic as of https://bugs.mageia.org/show_bug.cgi?id=25686#c21 is
> resolved on all instances.

does the cpio-2.13-1.1 in updates_testing also work for you ?
Comment 32 Mageia Robot 2019-11-19 22:19:01 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2019-0332.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 33 Ulrich Beckmann 2019-11-20 13:43:09 CET
(In reply to Thomas Backlund from comment #31)
> (In reply to Ulrich Beckmann from comment #30)
> > (In reply to Thomas Backlund from comment #26)
> > > For those that have reboot issues, try:
> > > 
> > > urpmi --downgrade cpio-2.12-5.mga7
> > > 
> > > 
> > > There is a bug in that update showing up for some.
> > > 
> > > I've managed to reproduce it and am currently bisecting it
> > 
> > Downgraded cpio as recommended or set # dnf versionlock add cpio.
> > 
> > The kernel panic as of https://bugs.mageia.org/show_bug.cgi?id=25686#c21 is
> > resolved on all instances.
> 
> does the cpio-2.13-1.1 in updates_testing also work for you ?

Yes, that works now. On the first try, cpio-2.13-1.1 was not available probably because of https://bugs.mageia.org/show_bug.cgi?id=25139.

Note You need to log in before you can comment on or make changes to this bug.