Bug 28210 - Update request: kernel-5.10.12-1.mga7
Summary: Update request: kernel-5.10.12-1.mga7
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 7
Hardware: All Linux
Priority: High major
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7-64-OK, MGA7-32-OK
Keywords: advisory, validated_update
Depends on:
Blocks: 28150
  Show dependency treegraph
 
Reported: 2021-01-24 15:09 CET by Thomas Backlund
Modified: 2021-01-31 22:35 CET (History)
8 users (show)

See Also:
Source RPM: kernel
CVE:
Status comment:


Attachments

Description Thomas Backlund 2021-01-24 15:09:37 CET
So this comes faster than planned, but as it fixes some important issues for Mageia users (and this kernel is also in use in current cauldron):

- I forgot to fix and re-enable rtl8821ce driver, causing users to end up without wifi (mga#28150)
- a fix for some 32bit systems not booting at all
- fixing an upstream pipe vs spicing regression causing some vpn and cgit setups to start working...


all changes are:
- update to 5.10.10
  * drop merged patches
- ALSA: hda: Add AlderLake-P PCI ID and HDMI codec vid
- ALSA: hda: Add Cometlake-R PCI ID
- ASoC: AMD Renoir - refine DMI entries for some Lenovo products
- crypto: arm64/sha - add missing module aliases
- drm/gpu/nouveau/dispnv50: Restore pushing of all data
- fix and re-enamble 3rdparty rtl8821ce driver (mga#28150)
- pipe: allow sendfile() destination with splice_write
- x86/mmx: Use KFPU_387 for MMX string operations


there is now:

SRPMS:
kernel-5.10.10-1.mga7.src.rpm
kmod-virtualbox-6.1.18-2.mga7.src.rpm
kmod-xtables-addons-3.13-7.mga7.src.rpm


i586:
bpftool-5.10.10-1.mga7.i586.rpm
cpupower-5.10.10-1.mga7.i586.rpm
cpupower-devel-5.10.10-1.mga7.i586.rpm
kernel-desktop-5.10.10-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-5.10.10-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-5.10.10-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-latest-5.10.10-1.mga7.i586.rpm
kernel-desktop586-latest-5.10.10-1.mga7.i586.rpm
kernel-desktop-devel-5.10.10-1.mga7-1-1.mga7.i586.rpm
kernel-desktop-devel-latest-5.10.10-1.mga7.i586.rpm
kernel-desktop-latest-5.10.10-1.mga7.i586.rpm
kernel-doc-5.10.10-1.mga7.noarch.rpm
kernel-server-5.10.10-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-5.10.10-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-latest-5.10.10-1.mga7.i586.rpm
kernel-server-latest-5.10.10-1.mga7.i586.rpm
kernel-source-5.10.10-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.10-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.10-1.mga7.i586.rpm
libbpf0-5.10.10-1.mga7.i586.rpm
libbpf-devel-5.10.10-1.mga7.i586.rpm
perf-5.10.10-1.mga7.i586.rpm

xtables-addons-kernel-5.10.10-desktop-1.mga7-3.13-7.mga7.i586.rpm
xtables-addons-kernel-5.10.10-desktop586-1.mga7-3.13-7.mga7.i586.rpm
xtables-addons-kernel-5.10.10-server-1.mga7-3.13-7.mga7.i586.rpm
xtables-addons-kernel-desktop586-latest-3.13-7.mga7.i586.rpm
xtables-addons-kernel-desktop-latest-3.13-7.mga7.i586.rpm
xtables-addons-kernel-server-latest-3.13-7.mga7.i586.rpm



x86_64:
bpftool-5.10.10-1.mga7.x86_64.rpm
cpupower-5.10.10-1.mga7.x86_64.rpm
cpupower-devel-5.10.10-1.mga7.x86_64.rpm
kernel-desktop-5.10.10-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-5.10.10-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-latest-5.10.10-1.mga7.x86_64.rpm
kernel-desktop-latest-5.10.10-1.mga7.x86_64.rpm
kernel-doc-5.10.10-1.mga7.noarch.rpm
kernel-server-5.10.10-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-5.10.10-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-latest-5.10.10-1.mga7.x86_64.rpm
kernel-server-latest-5.10.10-1.mga7.x86_64.rpm
kernel-source-5.10.10-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.10-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.10-1.mga7.x86_64.rpm
lib64bpf0-5.10.10-1.mga7.x86_64.rpm
lib64bpf-devel-5.10.10-1.mga7.x86_64.rpm
perf-5.10.10-1.mga7.x86_64.rpm

virtualbox-kernel-5.10.10-desktop-1.mga7-6.1.18-2.mga7.x86_64.rpm
virtualbox-kernel-5.10.10-server-1.mga7-6.1.18-2.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.1.18-2.mga7.x86_64.rpm
virtualbox-kernel-server-latest-6.1.18-2.mga7.x86_64.rpm

xtables-addons-kernel-5.10.10-desktop-1.mga7-3.13-7.mga7.x86_64.rpm
xtables-addons-kernel-5.10.10-server-1.mga7-3.13-7.mga7.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.13-7.mga7.x86_64.rpm
xtables-addons-kernel-server-latest-3.13-7.mga7.x86_64.rpm
Thomas Backlund 2021-01-24 15:09:50 CET

Blocks: (none) => 28150

Comment 1 Thomas Backlund 2021-01-24 17:45:59 CET
(In reply to Thomas Backlund from comment #0)

> - fixing an upstream pipe vs spicing regression causing some vpn and cgit
> setups to start working...
> 

apparently I cant write....

that should have said:
- fixing an upstream pipe vs splicing regression in 5.10 series causing some vpn and cgit setups to stop working...
Comment 2 Aurelien Oudelet 2021-01-25 14:47:57 CET
Using QA Repo,
On a M7 x86_64 on Intel Core i5 6600K with nvidia GeForce GTX 1660 Ti.

M7 Plasma, default preset from Classic ISO installer (for records).

Update smoothly over existing installation
nvidia-current correctly recompiled using DKMS.

Ethernet OK with e1000e on Intel Corporation|Ethernet Connection (2) I219-V 
WiFi OK with iwlwifi on Intel Corporation|Wi-Fi 6 AX200 device.
Bluetooth OK with btusb on Intel Corp.|AX200 Bluetooth 

Sound OK from Motherboard and from HDMI outputs
snd_hda_intel on NVIDIA Corporation|TU116 High Definition Audio Controller 
snd_hda_intel on Intel Corporation|100 Series/C230 Series Chipset Family HD Audio Controller

NVMe SSD OK
SATA devices OK

Note Virtualbox is OK.

So far so good.
Leaving untouched.
Advisory written and pushed.

Upstream changelog
https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10

Keywords: (none) => advisory
CC: (none) => ouaurelien

Comment 3 Len Lawrence 2021-01-25 22:09:39 CET
Kernel: 5.10.10-desktop-1.mga7 x86_64
Mobo: ASUSTeK model: TUF X299 MARK 2
10-Core: Intel Core i9-7900X type: MT MCP
NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia v: 460.32.03

Updated and rebooted to Mate.  nvidia kmod built on the fly.
Network with NFS shares up and running.  Stress tests ran OK.
Spindle, nvme and SSD drives running fine.  No worries so far.

CC: (none) => tarazed25

Comment 4 James Kerr 2021-01-26 09:58:21 CET
on mga7-64  kernel-desktop  plasma

Packages installed cleanly:
- cpupower-5.10.10-1.mga7.x86_64
- kernel-desktop-5.10.10-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.10-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.10-1.mga7.x86_64
- kernel-desktop-latest-5.10.10-1.mga7.x86_64
- kernel-userspace-headers-5.10.10-1.mga7.x86_64
- virtualbox-kernel-5.10.10-desktop-1.mga7-6.1.18-2.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.18-2.mga7.x86_64

system re-booted normally:

uname -r
5.10.10-desktop-1.mga7

# dkms status
virtualbox, 6.1.18-1.mga7, 5.10.10-desktop-1.mga7, x86_64: installed 

no regressions observed

vbox and client launched normally

looks OK for mga7-64 on this system:

Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 
CPU: Intel Core i7-6700
Graphics: Intel HD Graphics 530 (Skylake GT2)

CC: (none) => jim

Comment 5 Aurelien Oudelet 2021-01-27 16:18:39 CET
This needs to be tested on ati/radeon/amd graphics cards to check if there is something show-stopper.

See also Bug 28154.
Comment 6 Thomas Backlund 2021-01-27 16:47:54 CET
(In reply to Aurelien Oudelet from comment #5)
> This needs to be tested on ati/radeon/amd graphics cards to check if there
> is something show-stopper.
> 
> See also Bug 28154.

that's a Cauldron-only issue that is fixed with

  drakx-kbd-mouse-x11-1.32-2.mga8
  ldetect-lst-0.6.24-2.mga8

I dont push experimental code in stable updates
Comment 7 Thomas Backlund 2021-01-28 13:11:20 CET
this will now be a security update... 

and this will now be updated to 5.10.11 to pick up follow-up fixes for the 32bit booting issues, several follow-up fixes for the pipe vs splice issues and some crash fixes...

Summary: Update request: kernel-5.10.10-1.mga7 => Update request: kernel-5.10.11-1.mga7
QA Contact: (none) => security
Component: RPM Packages => Security
Keywords: advisory => feedback

Comment 8 Thomas Backlund 2021-01-28 14:40:31 CET
and the ones to test are:


SRPMS:
kernel-5.10.11-1.mga7.src.rpm
kmod-virtualbox-6.1.18-3.mga7.src.rpm
kmod-xtables-addons-3.13-8.mga7.src.rpm



i586:
bpftool-5.10.11-1.mga7.i586.rpm
cpupower-5.10.11-1.mga7.i586.rpm
cpupower-devel-5.10.11-1.mga7.i586.rpm
kernel-desktop-5.10.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-5.10.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-5.10.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-latest-5.10.11-1.mga7.i586.rpm
kernel-desktop586-latest-5.10.11-1.mga7.i586.rpm
kernel-desktop-devel-5.10.11-1.mga7-1-1.mga7.i586.rpm
kernel-desktop-devel-latest-5.10.11-1.mga7.i586.rpm
kernel-desktop-latest-5.10.11-1.mga7.i586.rpm
kernel-doc-5.10.11-1.mga7.noarch.rpm
kernel-server-5.10.11-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-5.10.11-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-latest-5.10.11-1.mga7.i586.rpm
kernel-server-latest-5.10.11-1.mga7.i586.rpm
kernel-source-5.10.11-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.11-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.11-1.mga7.i586.rpm
libbpf0-5.10.11-1.mga7.i586.rpm
libbpf-devel-5.10.11-1.mga7.i586.rpm
perf-5.10.11-1.mga7.i586.rpm

xtables-addons-kernel-5.10.11-desktop-1.mga7-3.13-8.mga7.i586.rpm
xtables-addons-kernel-5.10.11-desktop586-1.mga7-3.13-8.mga7.i586.rpm
xtables-addons-kernel-5.10.11-server-1.mga7-3.13-8.mga7.i586.rpm
xtables-addons-kernel-desktop586-latest-3.13-8.mga7.i586.rpm
xtables-addons-kernel-desktop-latest-3.13-8.mga7.i586.rpm
xtables-addons-kernel-server-latest-3.13-8.mga7.i586.rpm



x86_64:
bpftool-5.10.11-1.mga7.x86_64.rpm
cpupower-5.10.11-1.mga7.x86_64.rpm
cpupower-devel-5.10.11-1.mga7.x86_64.rpm
kernel-desktop-5.10.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-5.10.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-latest-5.10.11-1.mga7.x86_64.rpm
kernel-desktop-latest-5.10.11-1.mga7.x86_64.rpm
kernel-doc-5.10.11-1.mga7.noarch.rpm
kernel-server-5.10.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-5.10.11-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-latest-5.10.11-1.mga7.x86_64.rpm
kernel-server-latest-5.10.11-1.mga7.x86_64.rpm
kernel-source-5.10.11-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.11-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.11-1.mga7.x86_64.rpm
lib64bpf0-5.10.11-1.mga7.x86_64.rpm
lib64bpf-devel-5.10.11-1.mga7.x86_64.rpm
perf-5.10.11-1.mga7.x86_64.rpm

virtualbox-kernel-5.10.11-desktop-1.mga7-6.1.18-3.mga7.x86_64.rpm
virtualbox-kernel-5.10.11-server-1.mga7-6.1.18-3.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.1.18-3.mga7.x86_64.rpm
virtualbox-kernel-server-latest-6.1.18-3.mga7.x86_64.rpm

xtables-addons-kernel-5.10.11-desktop-1.mga7-3.13-8.mga7.x86_64.rpm
xtables-addons-kernel-5.10.11-server-1.mga7-3.13-8.mga7.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.13-8.mga7.x86_64.rpm
xtables-addons-kernel-server-latest-3.13-8.mga7.x86_64.rpm



and theese kernels have been in use in Cauldron since yesterday...

Keywords: feedback => (none)

Comment 9 Morgan Leijström 2021-01-28 17:03:35 CET
64 bit OK on My workstation "svarten": Mainboard: Sabertooth P67, CPU: i7-3770, RAM 16G, GM107 [GeForce GTX 750] using nvidia-current; GeForce 635 series and later, 4k display.

Was already running with 5.10.10 two days

Now updated to:
- cpupower-5.10.11-1.mga7.x86_64
- kernel-desktop-5.10.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.11-1.mga7.x86_64
- kernel-desktop-latest-5.10.11-1.mga7.x86_64
- kernel-userspace-headers-5.10.11-1.mga7.x86_64
- virtualbox-kernel-5.10.11-desktop-1.mga7-6.1.18-3.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.18-3.mga7.x86_64

rebooted, $ sudo dkms status tells nvidia-current and virtualbox are OK

Disk&Filesystem: SSD with /boot/EFI and ext4 /boot, LUKS{LVM {swap, ext4 /home & / } and a spinner at /mnt/somewhere

Plasma desktop, using Thunderbird, LibreOffice, Ktorrent, Nextcloud client...
Video with sound in Firefox
CUDA and OpenCL detected
Stress test: While working with other things BOINC use all cores to 100%, videos do not stutter.

Also virtualbox 6.1.18 seem OK running MSW7 64 bit guest incl folder sharing, USB memory, bidirectional clipboard, dynamic guest window resizing. All as usual, need to free 1 or 2 cores from BOINC to avoid video stutter in guest Firefox, playing video at svtplay.se.

CC: (none) => fri

Comment 10 Thomas Backlund 2021-01-29 17:57:06 CET
updated advisory added to svn

Keywords: (none) => advisory

Comment 11 James Kerr 2021-01-29 19:44:54 CET
on mga7-64  kernel-desktop  plasma

Packages installed cleanly:
- cpupower-5.10.11-1.mga7.x86_64
- kernel-desktop-5.10.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.11-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.11-1.mga7.x86_64
- kernel-desktop-latest-5.10.11-1.mga7.x86_64
- kernel-userspace-headers-5.10.11-1.mga7.x86_64
- virtualbox-kernel-5.10.11-desktop-1.mga7-6.1.18-3.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.18-3.mga7.x86_64

system re-booted normally:

uname -r
5.10.11-desktop-1.mga7

# dkms status
virtualbox, 6.1.18-1.mga7, 5.10.11-desktop-1.mga7, x86_64: installed 

no regressions observed

vbox and client launched normally

looks OK for mga7-64 on this system:

Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 
CPU: Intel Core i7-6700
Graphics: Intel HD Graphics 530 (Skylake GT2)
Comment 12 Thomas Backlund 2021-01-30 14:50:08 CET
Putting on pause as I'm rolling it up to 5.10.12 to close down a local priv escalation via futexes

Keywords: advisory => feedback

Comment 13 Len Lawrence 2021-01-30 14:53:46 CET
Updated from kernel-linus.

Kernel: 5.10.11-desktop-1.mga7 x86_64
10-Core: Intel Core i9-7900X
NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia

Mate desktop came back fully populated.
32-bit client launched OK in virtualbox.
Comment 14 Thomas Backlund 2021-01-30 18:43:01 CET
This 5.10.12 update closes this security issue:

An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel (CVE-2021-3347).


SRPMS:
kernel-5.10.12-1.mga7.src.rpm
kmod-virtualbox-6.1.18-4.mga7.src.rpm
kmod-xtables-addons-3.13-9.mga7.src.rpm


i586:
bpftool-5.10.12-1.mga7.i586.rpm
cpupower-5.10.12-1.mga7.i586.rpm
cpupower-devel-5.10.12-1.mga7.i586.rpm
kernel-desktop-5.10.12-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-5.10.12-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-5.10.12-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-latest-5.10.12-1.mga7.i586.rpm
kernel-desktop586-latest-5.10.12-1.mga7.i586.rpm
kernel-desktop-devel-5.10.12-1.mga7-1-1.mga7.i586.rpm
kernel-desktop-devel-latest-5.10.12-1.mga7.i586.rpm
kernel-desktop-latest-5.10.12-1.mga7.i586.rpm
kernel-doc-5.10.12-1.mga7.noarch.rpm
kernel-server-5.10.12-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-5.10.12-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-latest-5.10.12-1.mga7.i586.rpm
kernel-server-latest-5.10.12-1.mga7.i586.rpm
kernel-source-5.10.12-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.12-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.12-1.mga7.i586.rpm
libbpf0-5.10.12-1.mga7.i586.rpm
libbpf-devel-5.10.12-1.mga7.i586.rpm
perf-5.10.12-1.mga7.i586.rpm

xtables-addons-kernel-5.10.12-desktop-1.mga7-3.13-9.mga7.i586.rpm
xtables-addons-kernel-5.10.12-desktop586-1.mga7-3.13-9.mga7.i586.rpm
xtables-addons-kernel-5.10.12-server-1.mga7-3.13-9.mga7.i586.rpm
xtables-addons-kernel-desktop586-latest-3.13-9.mga7.i586.rpm
xtables-addons-kernel-desktop-latest-3.13-9.mga7.i586.rpm
xtables-addons-kernel-server-latest-3.13-9.mga7.i586.rpm


x86_64:
bpftool-5.10.12-1.mga7.x86_64.rpm
cpupower-5.10.12-1.mga7.x86_64.rpm
cpupower-devel-5.10.12-1.mga7.x86_64.rpm
kernel-desktop-5.10.12-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-5.10.12-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-latest-5.10.12-1.mga7.x86_64.rpm
kernel-desktop-latest-5.10.12-1.mga7.x86_64.rpm
kernel-doc-5.10.12-1.mga7.noarch.rpm
kernel-server-5.10.12-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-5.10.12-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-latest-5.10.12-1.mga7.x86_64.rpm
kernel-server-latest-5.10.12-1.mga7.x86_64.rpm
kernel-source-5.10.12-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.12-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.12-1.mga7.x86_64.rpm
lib64bpf0-5.10.12-1.mga7.x86_64.rpm
lib64bpf-devel-5.10.12-1.mga7.x86_64.rpm
perf-5.10.12-1.mga7.x86_64.rpm

virtualbox-kernel-5.10.12-desktop-1.mga7-6.1.18-4.mga7.x86_64.rpm
virtualbox-kernel-5.10.12-server-1.mga7-6.1.18-4.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.1.18-4.mga7.x86_64.rpm
virtualbox-kernel-server-latest-6.1.18-4.mga7.x86_64.rpm

xtables-addons-kernel-5.10.12-desktop-1.mga7-3.13-9.mga7.x86_64.rpm
xtables-addons-kernel-5.10.12-server-1.mga7-3.13-9.mga7.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.13-9.mga7.x86_64.rpm
xtables-addons-kernel-server-latest-3.13-9.mga7.x86_64.rpm

Keywords: feedback => (none)
Priority: Normal => High
Summary: Update request: kernel-5.10.11-1.mga7 => Update request: kernel-5.10.12-1.mga7
Severity: normal => major

Comment 15 Thomas Backlund 2021-01-30 18:55:05 CET
Updated advisory: (added to svn)

type: security
subject: Updated kernel packages fix security vulnerabilities
CVE:
 - CVE-2021-3178
 - CVE-2021-3347
src:
  7:
   core:
     - kernel-5.10.12-1.mga7
     - kmod-virtualbox-6.1.18-4.mga7
     - kmod-xtables-addons-3.13-9.mga7
description: |
  This kernel update is based on upstream 5.10.11 and fixes atleast the
  following security issue:

  fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS
  export of a subdirectory of a filesystem, allows remote attackers to
  traverse to other parts of the filesystem via READDIRPLUS (CVE-2021-3178).

  An issue was discovered in the Linux kernel through 5.10.11. PI futexes
  have a kernel stack use-after-free during fault handling, allowing local
  users to execute code in the kernel (CVE-2021-3347).

  It also adds the following fixes:
  - ALSA: hda: Add Cometlake-R PCI ID
  - ALSA: hda: Add AlderLake-P PCI ID and HDMI codec vid
  - ALSA: hda/via: Apply the workaround generically for Clevo machines
  - ASoC: AMD Renoir - refine DMI entries for some Lenovo products
  - crypto: arm64/sha - add missing module aliases
  - drm/amdgpu: Add Missing Sienna Cichlid DID
  - drm/gpu/nouveau/dispnv50: Restore pushing of all data
  - fix and re-enamble 3rdparty rtl8821ce driver (mga#28150)
  - iwlwifi: provide gso_type to GSO packets (fixes upload speed regression)
  - nbd: freeze the queue while we're adding connections

  For other upstream fixes, see the referenced changelogs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=28210
 - https://bugs.mageia.org/show_bug.cgi?id=28150
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.9
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.10
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.11
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12

Keywords: (none) => advisory

Comment 16 Len Lawrence 2021-01-30 22:07:57 CET
Kernel: 5.10.12-desktop-1.mga7 x86_64
10-Core: Intel Core i9-7900X
NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia
Intel Ethernet I219-V driver: e1000e
Memory: 31.06 GiB used: 1.67 GiB

stress tests completed.  glmark2 runs.  LAN up and running with NAS and NFS.  File server online.  Thunderbird running.  Reinstalled virtualbox module to get vbox running.  Launched a 32-bit Mageia client and installed 300 updates.
Comment 17 Thomas Andrews 2021-01-30 23:20:16 CET
Dell Dimension e520, Core2Quad Q6600, 4GB RAM, AMD HD 8570 graphics, rtl8192cu wifi, 32-bit Plasma system.

This is the system affected by Bug 28170, an unresponsive sddm login screen. Before this update, the video card had been experimentally switched from the radeon/ati driver to the amdgpu driver to solve/workaround the issue.

Updated cpupower, kernel-desktop, kernel-desktop-latest, using QA Repo. No installation issues.

No issues in the reboot - the sddm login remains responsive with the amdgpu driver. The reboot completed without incident. Tried a few things, watched a video with vlc, viewed several photos with Gwenview, went to a few websites with Firefox. No issues noted.

Looks OK on this hardware.

CC: (none) => andrewsfarm

Comment 18 Thomas Andrews 2021-01-31 00:24:10 CET
Dell Inspiron 5100, 32-bit P4, Radeon M7500 (RV200) graphics, Atheros wifi, 32-bit Xfce system.

The following 4 packages are going to be installed:

- cpupower-5.10.12-1.mga7.i586
- kernel-desktop-5.10.12-1.mga7-1-1.mga7.i586
- kernel-desktop-latest-5.10.12-1.mga7.i586
- kernel-userspace-headers-5.10.12-1.mga7.i586

No installation issues. After reboot tried this and that, no issues noted. Using it to make this report.

Looks OK on this hardware.
Comment 19 Len Lawrence 2021-01-31 00:42:53 CET
Kernel: 5.10.12-1.mga7 x86_64
Quad Core: Intel Core i7-4790
NVIDIA GM204 [GeForce GTX 970] driver: nouveau

This reboots to a working desktop but I have been unable to get it to accept nvidia.  It works on my other workstation but here goes round in a loop saying "there has been a display driver change".  OK, then it displays some cryptic numbers and fails to respond to anything.  Have to cold reboot each time.  Had to use maintenance mode in the end to switch the driver back to nouveau.
Comment 20 Thomas Backlund 2021-01-31 00:45:28 CET
(In reply to Len Lawrence from comment #19)
> Kernel: 5.10.12-1.mga7 x86_64
> Quad Core: Intel Core i7-4790
> NVIDIA GM204 [GeForce GTX 970] driver: nouveau
> 
> This reboots to a working desktop but I have been unable to get it to accept
> nvidia.  It works on my other workstation but here goes round in a loop
> saying "there has been a display driver change".  OK, then it displays some
> cryptic numbers and fails to respond to anything.  Have to cold reboot each
> time.  Had to use maintenance mode in the end to switch the driver back to
> nouveau.

did "nokmsboot"  go missing from kernel command line ?
Comment 21 Len Lawrence 2021-01-31 00:57:26 CET
I did check that and "nokmsboot" was there.  Just about to reinstall nvidia-current in case there is something wrong with the installation.
Comment 22 Len Lawrence 2021-01-31 01:33:25 CET
Got rid of some old kernels and related packages.  Tried again after reinstalling the nvidia driver and running `dracut -f`.  Still no joy.

$ cat /proc/cmdline
BOOT_IMAGE=/boot/vmlinuz-5.10.12-1.mga7 root=UUID=5e7a9eae-168c-4ca1-abcb-1a50b177aac6 ro splash quiet noiswmd nokmsboot resume=UUID=3ed7cf91-da9e-41de-a007-a81c7b4c9ecf audit=0 vga=791

$ sudo dkms status
virtualbox, 6.1.18-1.mga7, 5.10.12-desktop-1.mga7, x86_64: installed 
virtualbox, 6.1.18-1.mga7, 5.10.12-1.mga7, x86_64: installed 
virtualbox, 6.1.18-1.mga7, 5.10.11-1.mga7, x86_64: installed 
virtualbox, 6.1.18-1.mga7, 5.10.10-1.mga7, x86_64: installed 
xtables-addons, 3.13-1.mga7, 5.10.12-desktop-1.mga7, x86_64: installed 
xtables-addons, 3.13-1.mga7, 5.10.12-1.mga7, x86_64: installed 
xtables-addons, 3.13-1.mga7, 5.10.11-1.mga7, x86_64: installed 
xtables-addons, 3.13-1.mga7, 5.10.10-1.mga7, x86_64: installed 
xtables-addons, 3.13-1.mga7, 5.10.8-desktop-2.mga7, x86_64: installed 
nvidia-current, 460.32.03-1.mga7.nonfree, 5.10.12-1.mga7, x86_64: installed 
xtables-addons, 3.13-1.mga7, 5.10.12-desktop-1.mga7, x86_64: installed-binary from 5.10.12-desktop-1.mga7
virtualbox, 6.1.18-1.mga7, 5.10.12-desktop-1.mga7, x86_64: installed-binary from 5.10.12-desktop-1.mga7
Comment 23 Morgan Leijström 2021-01-31 01:50:09 CET
Weird accident here. After update:
Boot fails mounting partition by UUID, i have / and home in LUKS encrypted LVM

Before reboot I uninstalled the previously working 5.10.9 and .10 due to /boot partition was near full, keeping the old good 5.7.19...

But now in grub selecting the old 5.7.19 kernel: same problem!

Booting Mageia 8 RC Live, i have no problem unlocking, mounting, browsing, backing up (in progress now).

Anything you want me to check?

I plan to fresh install Cauldron on that machine in about 33 hrs.
Comment 24 Len Lawrence 2021-01-31 01:51:31 CET
Ahem.  Been awake too long.  Just noticed that all these troubles occurred for the linus kernel.  Both desktop and linus had been installed but the boot menu defaulted to linus - just did not notice.  Another three cycles and nvidia was back in its rightful place.
Comment 25 Morgan Leijström 2021-01-31 03:41:58 CET
Investigating the havoc in comment 23:
In fstab the entries for all three logical partitions from LVM was gone (/, /home, swap).
I have been partitioning removeable devices using Diskdrake on that system.  But say if i had by mistake let diskdrake write fstab, i dont understand how the other partitions would still be in fstab ( /boot, /boot/EFI, and a large spinner under /mnt) - *only* the three lines starting with /dev/vg-mag/lv_ was gone.  And nothing added.

Will try booting with restored lines tomorrow.
Comment 26 James Kerr 2021-01-31 07:46:23 CET
on mga7-64  kernel-desktop  plasma

Packages installed cleanly:
- cpupower-5.10.12-1.mga7.x86_64
- kernel-desktop-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.12-1.mga7.x86_64
- kernel-desktop-latest-5.10.12-1.mga7.x86_64
- kernel-userspace-headers-5.10.12-1.mga7.x86_64
- virtualbox-kernel-5.10.12-desktop-1.mga7-6.1.18-4.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.18-4.mga7.x86_64

system re-booted normally:

uname -r
5.10.12-desktop-1.mga7

# dkms status
virtualbox, 6.1.18-1.mga7, 5.10.12-desktop-1.mga7, x86_64: installed 
virtualbox, 6.1.18-1.mga7, 5.10.12-desktop-1.mga7, x86_64: installed-binary from 5.10.12-desktop-1.mga7

no regressions observed

vbox and client launched normally

looks OK for mga7-64 on this system:

Mobo: Dell model: 09WH54 v: UEFI [Legacy]: Dell v: 2.13.1 
CPU: Intel Core i7-6700
Graphics: Intel HD Graphics 530 (Skylake GT2)
Comment 27 Morgan Leijström 2021-01-31 10:38:39 CET
Yep, system is up again.
And yep in journal i see diskdrake wrote fstab yesterday when i was experimenting in USB sticks.
It may be my fault i let it - but the content, as said, was missing all LVM parts which i did not touch and was active running all time until reboot.
Later... gotta work.
Comment 28 Thomas Andrews 2021-01-31 16:43:02 CET
"Andrews' Best" (Built this one myself) Intel i5-2500, Intel motherboard, Intel graphics, wired Internet connection, 64-bit Plasma system, used for production.

The following 6 packages are going to be installed:

- cpupower-5.10.12-1.mga7.x86_64
- kernel-desktop-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.10.12-1.mga7.x86_64
- kernel-userspace-headers-5.10.12-1.mga7.x86_64
- virtualbox-kernel-5.10.12-desktop-1.mga7-6.1.18-4.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.18-4.mga7.x86_64

No installation issues. After reboot tried this and that, VLC, Libreoffice Calc, Thunderbird, Firefox, Windows XP guest in VirtualBox. No issues noted.

Looks good here.
Comment 29 Brian Rockwell 2021-01-31 17:16:17 CET
Phys Hardware:  AMD X3-450, Nvidia 730GT (390 driver).

The following 5 packages are going to be installed:

- cpupower-5.10.12-1.mga7.x86_64
- kernel-desktop-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.12-1.mga7.x86_64
- kernel-desktop-latest-5.10.12-1.mga7.x86_64

-----rebooted-----


[root@linux brian]# uname -a
Linux linux.local 5.10.12-desktop-1.mga7 #1 SMP Sat Jan 30 14:29:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux


[root@linux brian]# lsmod | grep nvidia
nvidia_drm             53248  2
nvidia_modeset       1056768  11 nvidia_drm
nvidia              15831040  453 nvidia_modeset
ipmi_msghandler        69632  2 ipmi_devintf,nvidia
drm_kms_helper        262144  1 nvidia_drm
drm                   593920  6 drm_kms_helper,nvidia_drm,ttm
[root@linux brian]# 

working as designed.

CC: (none) => brtians1

Comment 30 Morgan Leijström 2021-01-31 18:39:45 CET
OK 64bit; repeated all tests in comment 9
Comment 31 William Kenney 2021-01-31 21:36:46 CET
In a Vbox client, M7.1, Gnome, 32-bit

[root@localhost wilcal]# uname -a
Linux localhost 5.10.8-desktop586-2.mga7 #1 SMP Mon Jan 18 01:48:12 UTC 2021 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.10.8-2.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.8-2.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop586-latest cpupower from updates testing

The following 3 packages are going to be installed:

- cpupower-5.10.12-1.mga7.i586
- kernel-desktop586-5.10.12-1.mga7-1-1.mga7.i586
- kernel-desktop586-latest-5.10.12-1.mga7.i586

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.10.12-desktop586-1.mga7 #1 SMP Sat Jan 30 14:19:50 UTC 2021 i686 i686 i386 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop586-latest
Package kernel-desktop586-latest-5.10.12-1.mga7.i586 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.12-1.mga7.i586 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

Comment 32 William Kenney 2021-01-31 21:37:30 CET
In a Vbox client, M7.1, Plasma, 64-bit

Testing: kernel-desktop-latest cpupower

[root@localhost wilcal]# uname -a
Linux localhost 5.10.8-desktop-2.mga7 #1 SMP Mon Jan 18 01:49:12 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.8-2.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.8-2.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower from updates testing

The following 3 packages are going to be installed:

- cpupower-5.10.12-1.mga7.x86_64
- kernel-desktop-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-latest-5.10.12-1.mga7.x86_64

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.10.12-desktop-1.mga7 #1 SMP Sat Jan 30 14:29:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.12-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.12-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.
Comment 33 William Kenney 2021-01-31 21:39:29 CET
On real hardware, M8, Plasma, 64-bit

initial status:

kernel-desktop-latest virtualbox
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest
cpupower dkms-vboxadditions dkms-virtualbox

[root@localhost wilcal]# uname -a
Linux localhost 5.10.8-desktop-2.mga7 #1 SMP Mon Jan 18 01:49:12 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
       
Mageia-8-rc-Live-Plasma-x86_64.iso
Runs as a Vbox client. Works just fine. Boots to a working desktop.

install from update_testing:

kernel-desktop-latest
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower

The following 7 packages are going to be installed:

- cpupower-5.10.12-1.mga7.x86_64
- kernel-desktop-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.12-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.12-1.mga7.x86_64
- kernel-desktop-latest-5.10.12-1.mga7.x86_64
- virtualbox-kernel-5.10.12-desktop-1.mga7-6.1.18-4.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.18-4.mga7.x86_64

[root@localhost wilcal]# uname -a
Linux localhost 5.10.12-desktop-1.mga7 #1 SMP Sat Jan 30 14:29:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

Mageia-8-rc-Live-Plasma-x86_64.iso
Runs as a Vbox client. Works just fine. Boots to a working desktop.

Mageia-7,1-Plasma-x86_64
Runs as a Vbox client. Works just fine. Boots to a working desktop.

Mageia-8-Plama-x86_64
Runs as a Vbox client. Works just fine. Boots to a working desktop.
Comment 34 Thomas Backlund 2021-01-31 21:50:31 CET
Thanks for all the tests.

validating and flushing out...

Keywords: (none) => validated_update
Whiteboard: (none) => MGA7-64-OK, MGA7-32-OK
CC: (none) => sysadmin-bugs

Comment 35 Mageia Robot 2021-01-31 22:35:32 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0061.html

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.