Bug 26420 - Update request: kernel-5.5.14-1.mga7
Summary: Update request: kernel-5.5.14-1.mga7
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: High critical
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK MGA7-32-OK
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2020-04-02 13:39 CEST by Thomas Backlund
Modified: 2020-04-03 02:47 CEST (History)
8 users (show)

See Also:
Source RPM: kernel
CVE:
Status comment:


Attachments

Description Thomas Backlund 2020-04-02 13:39:19 CEST
Atleast one critical root exploit fixed, various bugfixes, wireguard update and exfat-utils is rebuilt to get a bigger rel than the tainted package as we now ship the official exfat driver in the kernel (since 5.5.9-1)


SRPMS:
kernel-5.5.14-1.mga7.src.rpm
kmod-virtualbox-6.0.18-8.mga7.src.rpm
kmod-xtables-addons-3.8-8.mga7.src.rpm

wireguard-tools-1.0.20200319-1.mga7.src.rpm

exfat-utils-1.3.0-2.mga7.src.rpm



i586:
bpftool-5.5.14-1.mga7.i586.rpm
cpupower-5.5.14-1.mga7.i586.rpm
cpupower-devel-5.5.14-1.mga7.i586.rpm
kernel-desktop-5.5.14-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-5.5.14-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-5.5.14-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-latest-5.5.14-1.mga7.i586.rpm
kernel-desktop586-latest-5.5.14-1.mga7.i586.rpm
kernel-desktop-devel-5.5.14-1.mga7-1-1.mga7.i586.rpm
kernel-desktop-devel-latest-5.5.14-1.mga7.i586.rpm
kernel-desktop-latest-5.5.14-1.mga7.i586.rpm
kernel-doc-5.5.14-1.mga7.noarch.rpm
kernel-server-5.5.14-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-5.5.14-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-latest-5.5.14-1.mga7.i586.rpm
kernel-server-latest-5.5.14-1.mga7.i586.rpm
kernel-source-5.5.14-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.5.14-1.mga7.noarch.rpm
kernel-userspace-headers-5.5.14-1.mga7.i586.rpm
libbpf0-5.5.14-1.mga7.i586.rpm
libbpf-devel-5.5.14-1.mga7.i586.rpm
perf-5.5.14-1.mga7.i586.rpm

virtualbox-kernel-5.5.14-desktop-1.mga7-6.0.18-8.mga7.i586.rpm
virtualbox-kernel-5.5.14-desktop586-1.mga7-6.0.18-8.mga7.i586.rpm
virtualbox-kernel-5.5.14-server-1.mga7-6.0.18-8.mga7.i586.rpm
virtualbox-kernel-desktop586-latest-6.0.18-8.mga7.i586.rpm
virtualbox-kernel-desktop-latest-6.0.18-8.mga7.i586.rpm
virtualbox-kernel-server-latest-6.0.18-8.mga7.i586.rpm

xtables-addons-kernel-5.5.14-desktop-1.mga7-3.8-8.mga7.i586.rpm
xtables-addons-kernel-5.5.14-desktop586-1.mga7-3.8-8.mga7.i586.rpm
xtables-addons-kernel-5.5.14-server-1.mga7-3.8-8.mga7.i586.rpm
xtables-addons-kernel-desktop586-latest-3.8-8.mga7.i586.rpm
xtables-addons-kernel-desktop-latest-3.8-8.mga7.i586.rpm
xtables-addons-kernel-server-latest-3.8-8.mga7.i586.rpm

wireguard-tools-1.0.20200319-1.mga7.i586.rpm

exfat-utils-1.3.0-2.mga7.i586.rpm



x86_64:
bpftool-5.5.14-1.mga7.x86_64.rpm
cpupower-5.5.14-1.mga7.x86_64.rpm
cpupower-devel-5.5.14-1.mga7.x86_64.rpm
kernel-desktop-5.5.14-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-5.5.14-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-latest-5.5.14-1.mga7.x86_64.rpm
kernel-desktop-latest-5.5.14-1.mga7.x86_64.rpm
kernel-doc-5.5.14-1.mga7.noarch.rpm
kernel-server-5.5.14-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-5.5.14-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-latest-5.5.14-1.mga7.x86_64.rpm
kernel-server-latest-5.5.14-1.mga7.x86_64.rpm
kernel-source-5.5.14-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.5.14-1.mga7.noarch.rpm
kernel-userspace-headers-5.5.14-1.mga7.x86_64.rpm
lib64bpf0-5.5.14-1.mga7.x86_64.rpm
lib64bpf-devel-5.5.14-1.mga7.x86_64.rpm
perf-5.5.14-1.mga7.x86_64.rpm

virtualbox-kernel-5.5.14-desktop-1.mga7-6.0.18-8.mga7.x86_64.rpm
virtualbox-kernel-5.5.14-server-1.mga7-6.0.18-8.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.0.18-8.mga7.x86_64.rpm
virtualbox-kernel-server-latest-6.0.18-8.mga7.x86_64.rpm

xtables-addons-kernel-5.5.14-desktop-1.mga7-3.8-8.mga7.x86_64.rpm
xtables-addons-kernel-5.5.14-server-1.mga7-3.8-8.mga7.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.8-8.mga7.x86_64.rpm
xtables-addons-kernel-server-latest-3.8-8.mga7.x86_64.rpm

wireguard-tools-1.0.20200319-1.mga7.x86_64.rpm

exfat-utils-1.3.0-2.mga7.x86_64.rpm
Thomas Backlund 2020-04-02 13:39:27 CEST

Priority: Normal => High

Comment 1 Thomas Andrews 2020-04-02 14:49:51 CEST
HP Probook 6550b, i3,8GB RAM, Intel graphics, Intel wifi, 64-bit Plasma system.

Packages updated cleanly. After the reboot, tried several apps, including a Windows XP guest in VirtualBox. Read my local newspaper in Firefox, depressing as the news was.

No issues noted so far.

CC: (none) => andrewsfarm

Comment 2 Martin Whitaker 2020-04-02 15:14:12 CEST
Running here on three machines:

ASUS X470-I motherboard, AMD Ryzen 5 2400G (using integrated graphics), DDR4, Samsung 970 EVO Plus M.2 SSD, Intel I211 Ethernet.

HP Envy DV7 laptop, Intel Core i7-3630QM (Ivy Bridge), Nvidia GT635M + Intel hybrid graphics, DDR3, Crucial MX200 SATA SSD, Intel Wireless-N 2230 WiFi

ASUS X205TA notebook, Intel Atom Z3735F (Bay Trail) (using integrated graphics), DDR3, MMC card of unknown make, Broadcom BCM43340/2 WiFi.

No issues seen so far, will continue using.
Comment 3 James Kerr 2020-04-02 15:23:07 CEST
on mga7-64  kernel-desktop  plasma

Packages installed cleanly:
- cpupower-5.5.14-1.mga7.x86_64
- kernel-desktop-5.5.14-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.5.14-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.5.14-1.mga7.x86_64
- kernel-desktop-latest-5.5.14-1.mga7.x86_64
- kernel-userspace-headers-5.5.14-1.mga7.x86_64
- virtualbox-kernel-5.5.14-desktop-1.mga7-6.0.18-8.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.0.18-8.mga7.x86_64

system re-booted normally:

uname-r
5.5.14-desktop-1.mga7

# dkms status
virtualbox, 6.0.18-1.mga7, 5.5.9-desktop-1.mga7, x86_64: installed 
virtualbox, 6.0.18-1.mga7, 5.5.14-desktop-1.mga7, x86_64: installed 
virtualbox, 6.0.18-1.mga7, 5.5.9-desktop-1.mga7, x86_64: installed-binary from 5.5.9-desktop-1.mga7
virtualbox, 6.0.18-1.mga7, 5.5.14-desktop-1.mga7, x86_64: installed-binary from 5.5.14-desktop-1.mga7

I have also had this kernel running in a cauldron
installation on this system for several hours

vbox and client launched normally

no regressions observed

looks OK for mga7-64 on this system:

Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 
CPU: Intel Core i7-6700
Graphics: Intel HD Graphics 530 (Skylake GT2)

CC: (none) => jim

Comment 4 Len Lawrence 2020-04-02 15:58:14 CEST
mga7, x86_64
Intel Core i9-7900X
NVIDIA GP102 [GeForce GTX 1080 Ti] : 430.64

Works fine here.  Smooth reboot.  NFS shares mounted automatically.
Concurrent stress tests ran to completion.  GL tests OK.
Desktop functioning normally.
Installed virtualbox and then dkms-virtualbox.  mga6 client launched without fuss.

CC: (none) => tarazed25

Comment 5 Thomas Andrews 2020-04-02 16:14:21 CEST
i5 2500, Integrated Intel graphics, wired Internet connection, 64-bit Plasma system.

My production system. Everything looks good, including VirtualBox, vlc, printing with HP printers. No issues noted.
Comment 6 Len Lawrence 2020-04-02 16:32:27 CEST
Installs and runs OK on Alienware X51.
Intel Core i7-2600
GeForce GTX 555/PCIe/SSE2 : NVIDIA 390.132

Running on wifi
NFS, stress tests, glmark2, virtualbox all good.
Comment 7 James Kerr 2020-04-02 16:33:56 CEST
on mga7-32  in a vbox VM  kernel-desktop586  plasma

packages installed cleanly:
- cpupower-5.5.14-1.mga7.i586
- kernel-desktop586-5.5.14-1.mga7-1-1.mga7.i586
- kernel-desktop586-devel-5.5.14-1.mga7-1-1.mga7.i586
- kernel-desktop586-devel-latest-5.5.14-1.mga7.i586
- kernel-desktop586-latest-5.5.14-1.mga7.i586
- kernel-userspace-headers-5.5.14-1.mga7.i586

VM re-booted normally:

$ uname -r
5.5.14-desktop586-1.mga7

# dkms status
vboxadditions, 6.0.18-1.mga7: added 

No regressions noted

OK for mga7-32 in a vbox VM
Thomas Backlund 2020-04-02 16:34:40 CEST

QA Contact: (none) => security
Component: RPM Packages => Security

Comment 8 Thomas Andrews 2020-04-02 16:43:17 CEST
Dell Inspiron 5100, 32-bit P4, 2GB RAM, Radeon RV200 graphics, old Atheros wifi, 32-bit Xfce system, using kernel-desktop.

Packages installed cleanly, no issues noted after reboot. Using it to make this report.
Comment 9 Brian Rockwell 2020-04-02 16:44:25 CEST
AMD A6 - Laptop (R4 graphics) 

- cpupower-5.5.14-1.mga7.x86_64
- kernel-desktop-5.5.14-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.5.14-1.mga7.x86_64
- lib64rpm8-4.14.3-0.rc1.13.mga7.x86_64
- python3-rpm-4.14.3-0.rc1.13.mga7.x86_64
- rpm-4.14.3-0.rc1.13.mga7.x86_64
- rpm-plugin-syslog-4.14.3-0.rc1.13.mga7.x86_64
- rpm-plugin-systemd-inhibit-4.14.3-0.rc1.13.mga7.x86_64

rebooted

$ uname -a
Linux localhost 5.5.14-desktop-1.mga7 #1 SMP Wed Apr 1 15:12:13 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux


nextcloud client, firefox, libreoffice, chromium are working.

no fans roaring, system seems to be functioning normally.
Comment 10 Len Lawrence 2020-04-02 16:59:54 CEST
Working on this production machine:
Intel Core i7-4790
GeForce GTX 970/PCIe/SSE2 : NVIDIA 430.64
Desktop running smoothly - vlc TV, LO writer, astronomy programs....
Comment 11 Thomas Andrews 2020-04-02 18:06:04 CEST
Dell Dimension e520, Core 2 Quad, 4GB RAM, Radeon HD8490 graphics, Realtec usb wifi dongle, 64-bit Plasma system.

Everything looks good here.
Comment 12 Brian Rockwell 2020-04-02 18:31:00 CEST
The following 8 packages are going to be installed:

- cpupower-5.5.14-1.mga7.i586
- kernel-server-5.5.14-1.mga7-1-1.mga7.i586
- kernel-server-latest-5.5.14-1.mga7.i586
- librpm8-4.14.3-0.rc1.13.mga7.i586
- python3-rpm-4.14.3-0.rc1.13.mga7.i586
- rpm-4.14.3-0.rc1.13.mga7.i586
- rpm-plugin-syslog-4.14.3-0.rc1.13.mga7.i586
- rpm-plugin-systemd-inhibit-4.14.3-0.rc1.13.mga7.i586


rebooted

$ uname -a
Linux localhost 5.5.14-server-1.mga7 #1 SMP Wed Apr 1 21:40:32 UTC 2020 i686 i686 i386 GNU/Linux


apache http, samba is working, nextcloud if functioning, and firefox is working

Seems to be functioning as designed.

CC: (none) => brtians1

Comment 13 William Kenney 2020-04-02 19:15:02 CEST
In a Vbox client, M7.1, Gnome, 32-bit

[root@localhost wilcal]# uname -a
Linux localhost 5.5.9-desktop586-1.mga7 #1 SMP Thu Mar 12 08:02:24 UTC 2020 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.5.9-1.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.5.9-1.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop586-latest cpupower from updates testing

The following 8 packages are going to be installed:

- cpupower-5.5.14-1.mga7.i586
- kernel-desktop586-5.5.14-1.mga7-1-1.mga7.i586
- kernel-desktop586-latest-5.5.14-1.mga7.i586
- librpm8-4.14.3-0.rc1.13.mga7.i586
- python3-rpm-4.14.3-0.rc1.13.mga7.i586
- rpm-4.14.3-0.rc1.13.mga7.i586
- rpm-plugin-syslog-4.14.3-0.rc1.13.mga7.i586
- rpm-plugin-systemd-inhibit-4.14.3-0.rc1.13.mga7.i586

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.5.14-desktop586-1.mga7 #1 SMP Wed Apr 1 15:13:43 UTC 2020 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.5.14-1.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.5.14-1.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

Comment 14 William Kenney 2020-04-02 19:16:07 CEST
In a Vbox client, M7.1, Plasma, 64-bit

Testing: kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.5.9-desktop-1.mga7 #1 SMP Thu Mar 12 08:02:44 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.5.9-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.5.9-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower from updates testing

The following 10 packages are going to be installed:

- cpupower-5.5.14-1.mga7.x86_64
- kernel-desktop-5.5.14-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.5.14-1.mga7.x86_64
- lib64rpm8-4.14.3-0.rc1.13.mga7.x86_64
- python2-rpm-4.14.3-0.rc1.13.mga7.x86_64
- python3-rpm-4.14.3-0.rc1.13.mga7.x86_64
- rpm-4.14.3-0.rc1.13.mga7.x86_64
- rpm-plugin-ima-4.14.3-0.rc1.13.mga7.x86_64
- rpm-plugin-syslog-4.14.3-0.rc1.13.mga7.x86_64
- rpm-plugin-systemd-inhibit-4.14.3-0.rc1.13.mga7.x86_64

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.5.14-desktop-1.mga7 #1 SMP Wed Apr 1 15:12:13 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.5.14-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.5.14-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.
Comment 15 Thomas Backlund 2020-04-03 00:06:48 CEST
Thanks for the quick tests, flushing it out

CC: (none) => sysadmin-bugs
Keywords: (none) => advisory, validated_update
Whiteboard: (none) => MGA7-64-OK MGA7-32-OK

Comment 16 Rolf Pedersen 2020-04-03 00:49:52 CEST
(In reply to Thomas Backlund from comment #0)
...
> and exfat-utils is rebuilt to get a bigger rel than the tainted package as
...

lol.  I was just wrapping up my late-to-the-party test with some good results on

[rolf@x570i ~]$ sudo inxi -MmCN
Machine:   Type: Desktop Mobo: ASUSTeK model: ROG STRIX X570-I GAMING v: Rev X.0x serial: 200164285700247 
           UEFI: American Megatrends v: 1405 date: 11/19/2019 
Memory:    RAM: total: 13.64 GiB used: 1.97 GiB (14.4%) 
           Array-1: capacity: 128 GiB note: check slots: 2 EC: None 
           Device-1: DIMM_A1 size: 8 GiB speed: 3200 MT/s 
           Device-2: DIMM_B1 size: 8 GiB speed: 3200 MT/s 
CPU:       Topology: Quad Core model: AMD Ryzen 5 3400G with Radeon Vega Graphics bits: 64 type: MT MCP 
           L2 cache: 2048 KiB 
           Speed: 3792 MHz min/max: 1400/3800 MHz Core speeds (MHz): 1: 3821 2: 3794 3: 3790 4: 3788 5: 3794 6: 3788 
           7: 3789 8: 3793 
Network:   Device-1: Intel Wi-Fi 6 AX200 driver: iwlwifi 
           Device-2: Intel I211 Gigabit Network driver: igb 

[rolf@x570i ~]$ sudo lspcidrake -v  | grep -i vga
Card:ATI Volcanic Islands and later (amdgpu/fglrx): Advanced Micro Devices, Inc. [AMD/ATI]|Picasso [DISPLAY_VGA] (vendor:1002 device:15d8 subv:1043 subd:876b) (rev: c8)

[rolf@x570i ~]$ rpm -qa --last | head
exfat-utils-1.3.0-1.mga7.tainted.x86_64       Thu 02 Apr 2020 02:19:50 PM PDT
virtualbox-kernel-desktop-latest-6.0.18-8.mga7.x86_64 Thu 02 Apr 2020 12:45:35 PM PDT
virtualbox-kernel-5.5.14-desktop-1.mga7-6.0.18-8.mga7.x86_64 Thu 02 Apr 2020 12:45:35 PM PDT
kernel-userspace-headers-5.5.14-1.mga7.x86_64 Thu 02 Apr 2020 12:45:35 PM PDT
kernel-desktop-5.5.14-1.mga7-1-1.mga7.x86_64  Thu 02 Apr 2020 12:45:35 PM PDT
kernel-desktop-latest-5.5.14-1.mga7.x86_64    Thu 02 Apr 2020 12:45:32 PM PDT
cpupower-5.5.14-1.mga7.x86_64                 Thu 02 Apr 2020 12:45:32 PM PDT
kernel-desktop-devel-5.5.14-1.mga7-1-1.mga7.x86_64 Thu 02 Apr 2020 12:45:31 PM PDT
kernel-desktop-devel-latest-5.5.14-1.mga7.x86_64 Thu 02 Apr 2020 12:45:29 PM PDT

Everything I tested seemed to work:
8 NFS shares got mounted
virtualbox worked
The grub2 windows bootloader entry was preserved, works, and default Mageia kernel is the newest.
My ethernet connection worked, I created a wifi connection with the onboard module, and a usb-plugged Blackberry Q10 revived an old connection on 

enp9s0f1u1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 169.254.82.106  netmask 255.255.255.252  broadcast 169.254.82.107

--modem, I guess.

The one thing that didn't work is formatting/mounting exfat, as reported elsewhere.  I had installed the new exfat-utils as I had the tainted version installed and have reverted to that to come to the conclusion, here.
I tried with exfat-utils installed and removed.  I tried modprobe/rmmod exfat under both conditions.  With that module loaded, I could format a 16G sdcard in gnome-disks, iirc, but nothing could mount it.  GParted always had the exfat format option greyed out but it identified the partition as exfat after gnome-disks created it.

Finally, reverted to the tainted exfat-utils and booted to 5.5.6-desktop-2.mga7, I can mount the exfat partition with device notifier

/dev/sdd1 on /run/media/rolf/exfat type exfat (rw,nosuid,nodev,relatime,uid=501,gid=501,fmask=0022,dmask=0022,iocharset=utf8,namecase=0,errors=remount-ro,uhelper=udisks2)

and write to it in Dolphin, normal user.  I notice, with this older kernel, the exfat kernel is automatically loaded whereas I always had to manually load it with the new kernel.

What is the path forward using exfat with the new kernels?

Thanks.

CC: (none) => rolfpedersen

Comment 17 Mageia Robot 2020-04-03 00:50:03 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2020-0156.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 18 Rolf Pedersen 2020-04-03 01:25:40 CEST
Ok, I can boot the new kernel, modprobe exfat, and mount in terminal as root, the exfat-formatted sdcard.  I can't write to it except as root but I'll work on it.
Comment 19 Morgan Leijström 2020-04-03 02:47:32 CEST
Late to the party, everything OK on three 64 bit machines, incl BOINC and VirtualBox, LUKS, LVM, ...

CC: (none) => fri


Note You need to log in before you can comment on or make changes to this bug.