Bug 29106 - Update request: kernel-5.10.43-1.mga8/7
Summary: Update request: kernel-5.10.43-1.mga8/7
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 8
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL:
Whiteboard: MGA7TOO, MGA8-64-OK, MGA8-32-OK, MGA7...
Keywords: advisory, validated_update
Depends on:
Blocks:
 
Reported: 2021-06-11 16:12 CEST by Thomas Backlund
Modified: 2021-06-13 23:34 CEST (History)
7 users (show)

See Also:
Source RPM: kernel
CVE:
Status comment:


Attachments

Description Thomas Backlund 2021-06-11 16:12:38 CEST
Security and bugfixes, advisory will follow

SRPMS:
kernel-5.10.43-1.mga8.src.rpm
kmod-virtualbox-6.1.22-1.6.mga8.src.rpm
kmod-xtables-addons-3.18-1.6.mga8.src.rpm


i586:
bpftool-5.10.43-1.mga8.i586.rpm
cpupower-5.10.43-1.mga8.i586.rpm
cpupower-devel-5.10.43-1.mga8.i586.rpm
kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586.rpm
kernel-desktop586-5.10.43-1.mga8-1-1.mga8.i586.rpm
kernel-desktop586-devel-5.10.43-1.mga8-1-1.mga8.i586.rpm
kernel-desktop586-devel-latest-5.10.43-1.mga8.i586.rpm
kernel-desktop586-latest-5.10.43-1.mga8.i586.rpm
kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.i586.rpm
kernel-desktop-devel-latest-5.10.43-1.mga8.i586.rpm
kernel-desktop-latest-5.10.43-1.mga8.i586.rpm
kernel-doc-5.10.43-1.mga8.noarch.rpm
kernel-server-5.10.43-1.mga8-1-1.mga8.i586.rpm
kernel-server-devel-5.10.43-1.mga8-1-1.mga8.i586.rpm
kernel-server-devel-latest-5.10.43-1.mga8.i586.rpm
kernel-server-latest-5.10.43-1.mga8.i586.rpm
kernel-source-5.10.43-1.mga8-1-1.mga8.noarch.rpm
kernel-source-latest-5.10.43-1.mga8.noarch.rpm
kernel-userspace-headers-5.10.43-1.mga8.i586.rpm
libbpf0-5.10.43-1.mga8.i586.rpm
libbpf-devel-5.10.43-1.mga8.i586.rpm
perf-5.10.43-1.mga8.i586.rpm

xtables-addons-kernel-5.10.43-desktop-1.mga8-3.18-1.6.mga8.i586.rpm
xtables-addons-kernel-5.10.43-desktop586-1.mga8-3.18-1.6.mga8.i586.rpm
xtables-addons-kernel-5.10.43-server-1.mga8-3.18-1.6.mga8.i586.rpm
xtables-addons-kernel-desktop586-latest-3.18-1.6.mga8.i586.rpm
xtables-addons-kernel-desktop-latest-3.18-1.6.mga8.i586.rpm
xtables-addons-kernel-server-latest-3.18-1.6.mga8.i586.rpm


x86_64:
bpftool-5.10.43-1.mga8.x86_64.rpm
cpupower-5.10.43-1.mga8.x86_64.rpm
cpupower-devel-5.10.43-1.mga8.x86_64.rpm
kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64.rpm
kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64.rpm
kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64.rpm
kernel-desktop-latest-5.10.43-1.mga8.x86_64.rpm
kernel-doc-5.10.43-1.mga8.noarch.rpm
kernel-server-5.10.43-1.mga8-1-1.mga8.x86_64.rpm
kernel-server-devel-5.10.43-1.mga8-1-1.mga8.x86_64.rpm
kernel-server-devel-latest-5.10.43-1.mga8.x86_64.rpm
kernel-server-latest-5.10.43-1.mga8.x86_64.rpm
kernel-source-5.10.43-1.mga8-1-1.mga8.noarch.rpm
kernel-source-latest-5.10.43-1.mga8.noarch.rpm
kernel-userspace-headers-5.10.43-1.mga8.x86_64.rpm
lib64bpf0-5.10.43-1.mga8.x86_64.rpm
lib64bpf-devel-5.10.43-1.mga8.x86_64.rpm
perf-5.10.43-1.mga8.x86_64.rpm

virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64.rpm
virtualbox-kernel-5.10.43-server-1.mga8-6.1.22-1.6.mga8.x86_64.rpm
virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64.rpm
virtualbox-kernel-server-latest-6.1.22-1.6.mga8.x86_64.rpm

xtables-addons-kernel-5.10.43-desktop-1.mga8-3.18-1.6.mga8.x86_64.rpm
xtables-addons-kernel-5.10.43-server-1.mga8-3.18-1.6.mga8.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.18-1.6.mga8.x86_64.rpm
xtables-addons-kernel-server-latest-3.18-1.6.mga8.x86_64.rpm
Comment 1 Thomas Backlund 2021-06-11 16:14:51 CEST
Mga7 rpms:

SRPMS:
kernel-5.10.43-1.mga7.src.rpm
kmod-virtualbox-6.1.22-1.6.mga7.src.rpm
kmod-xtables-addons-3.13-28.mga7.src.rpm


i586:
bpftool-5.10.43-1.mga7.i586.rpm
cpupower-5.10.43-1.mga7.i586.rpm
cpupower-devel-5.10.43-1.mga7.i586.rpm
kernel-desktop-5.10.43-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-5.10.43-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-5.10.43-1.mga7-1-1.mga7.i586.rpm
kernel-desktop586-devel-latest-5.10.43-1.mga7.i586.rpm
kernel-desktop586-latest-5.10.43-1.mga7.i586.rpm
kernel-desktop-devel-5.10.43-1.mga7-1-1.mga7.i586.rpm
kernel-desktop-devel-latest-5.10.43-1.mga7.i586.rpm
kernel-desktop-latest-5.10.43-1.mga7.i586.rpm
kernel-doc-5.10.43-1.mga7.noarch.rpm
kernel-server-5.10.43-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-5.10.43-1.mga7-1-1.mga7.i586.rpm
kernel-server-devel-latest-5.10.43-1.mga7.i586.rpm
kernel-server-latest-5.10.43-1.mga7.i586.rpm
kernel-source-5.10.43-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.43-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.43-1.mga7.i586.rpm
libbpf0-5.10.43-1.mga7.i586.rpm
libbpf-devel-5.10.43-1.mga7.i586.rpm
perf-5.10.43-1.mga7.i586.rpm

xtables-addons-kernel-5.10.43-desktop-1.mga7-3.13-28.mga7.i586.rpm
xtables-addons-kernel-5.10.43-desktop586-1.mga7-3.13-28.mga7.i586.rpm
xtables-addons-kernel-5.10.43-server-1.mga7-3.13-28.mga7.i586.rpm
xtables-addons-kernel-desktop586-latest-3.13-28.mga7.i586.rpm
xtables-addons-kernel-desktop-latest-3.13-28.mga7.i586.rpm
xtables-addons-kernel-server-latest-3.13-28.mga7.i586.rpm


x86_64:
bpftool-5.10.43-1.mga7.x86_64.rpm
cpupower-5.10.43-1.mga7.x86_64.rpm
cpupower-devel-5.10.43-1.mga7.x86_64.rpm
kernel-desktop-5.10.43-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-5.10.43-1.mga7-1-1.mga7.x86_64.rpm
kernel-desktop-devel-latest-5.10.43-1.mga7.x86_64.rpm
kernel-desktop-latest-5.10.43-1.mga7.x86_64.rpm
kernel-doc-5.10.43-1.mga7.noarch.rpm
kernel-server-5.10.43-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-5.10.43-1.mga7-1-1.mga7.x86_64.rpm
kernel-server-devel-latest-5.10.43-1.mga7.x86_64.rpm
kernel-server-latest-5.10.43-1.mga7.x86_64.rpm
kernel-source-5.10.43-1.mga7-1-1.mga7.noarch.rpm
kernel-source-latest-5.10.43-1.mga7.noarch.rpm
kernel-userspace-headers-5.10.43-1.mga7.x86_64.rpm
lib64bpf0-5.10.43-1.mga7.x86_64.rpm
lib64bpf-devel-5.10.43-1.mga7.x86_64.rpm
perf-5.10.43-1.mga7.x86_64.rpm

virtualbox-kernel-5.10.43-desktop-1.mga7-6.1.22-1.6.mga7.x86_64.rpm
virtualbox-kernel-5.10.43-server-1.mga7-6.1.22-1.6.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64.rpm
virtualbox-kernel-server-latest-6.1.22-1.6.mga7.x86_64.rpm

xtables-addons-kernel-5.10.43-desktop-1.mga7-3.13-28.mga7.x86_64.rpm
xtables-addons-kernel-5.10.43-server-1.mga7-3.13-28.mga7.x86_64.rpm
xtables-addons-kernel-desktop-latest-3.13-28.mga7.x86_64.rpm
xtables-addons-kernel-server-latest-3.13-28.mga7.x86_64.rpm

Whiteboard: (none) => MGA7TOO
Summary: Update request: kernel-5.10.43-1.mga8 => Update request: kernel-5.10.43-1.mga8/7

Comment 2 Guillaume Royer 2021-06-12 14:40:32 CEST
MGA 8 XFCE core i3 4Go ram, Nividia 540M, driver 390 and Broadcom Wl non free.

Updated kernel with QA repo tool:

bpftool-5.10.43-1.mga8.x86_64.rpm
cpupower-5.10.43-1.mga8.x86_64.rpm
cpupower-devel-5.10.43-1.mga8.x86_64.rpm
kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64.rpm
kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64.rpm
kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64.rpm
kernel-desktop-latest-5.10.43-1.mga8.x86_64.rpm
libbpf0-5.10.43-1.mga7.i586.rpm
libbpf-devel-5.10.43-1.mga7.i586.rpm
perf-5.10.43-1.mga7.i586.rpm
virtualbox-kernel-5.10.43-desktop-1.mga7-6.1.22-1.6.mga7.x86_64.rpm
virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64.rpm

No issues found after 2 days of use. Use with mageia-prime switch ok

================================================================================

MGA7 LXQt VM

Updated kernel with QA repo tools

No issues found after reboot.

CC: (none) => guillaume.royer

Comment 3 Morgan Leijström 2021-06-12 18:22:16 CEST
Package management quirks

I am running kernel 5.12.10
Using drakrpm, I uninstalled cpupower 5.12.10, and selected for install the 5.10.43 variants.
Problem: it wants to install the "-latest" packages of *5.12.10* :

- cpupower-5.10.43-1.mga8.x86_64
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-latest-5.12.10-2.mga8.x86_64
- kernel-desktop-latest-5.12.10-2.mga8.x86_64
- virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64

Possible workaround: manually deselect the "-latest" packages
But I did not execute that, instead I disabled any backport repos and started drakrpm again:

When I select kernel-desktop-5.10.43-1.mga8, it asks to install:
- cpupower-5.12.8-1.mga8.x86_64
- kernel-desktop-5.12.8-1.mga8-1-1.mga8.x86_64
- kernel-desktop-latest-5.12.8-1.mga8.x86_64

Which is insane as they are not in an enabled repo.
It may matter this system have *had* them installed ?
 - uninstalled them before this post (after successful test of 5.12.10)

$ urpmq --list-media active
Core Release (distrib1)
Core Updates (distrib3)
Core Updates Testing (distrib5)
Nonfree Release (distrib11)
Nonfree Updates (distrib13)
Nonfree Updates Testing (distrib15)
Tainted Release (distrib21)
Tainted Updates (distrib23)
Tainted Updates Testing (distrib25)
Core 32bit Release (distrib31)
Core 32bit Updates (distrib32)
Core 32bit Updates Testing (distrib33)
Nonfree 32bit Release (distrib36)
Nonfree 32bit Updates (distrib37)
Nonfree 32bit Updates Testing (distrib38)
Tainted 32bit Release (distrib41)
Tainted 32bit Updates (distrib42)
Tainted 32bit Updates Testing (distrib43)

$ LC_ALL=C urpmq cpupower-5.12.8-1.mga8
No package named cpupower-5.12.8-1.mga8

( and to compare: 
$ LC_ALL=C urpmq cpupower-5.10.43-1.mga8
cpupower
 )

So why do drakrpm want to install 5.12 packages?? They are 
a) for wrong kernel version, and 
b) from a (configured but) not enabled repo.

I am leaving it here for a while if someone want me to try something.

CC: (none) => fri

Comment 4 Brian Rockwell 2021-06-12 19:34:44 CEST
Phys Hardware - AMD, Nvidia 730GT (390), Plasma

The following 7 packages are going to be installed:

- cpupower-5.10.43-1.mga8.x86_64
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64
- kernel-desktop-latest-5.10.43-1.mga8.x86_64
- virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64
- virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64

--reboot--

$ uname -a
Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux


# lsmod | grep nvidia
nvidia_uvm            925696  0
nvidia_drm             53248  1
drm_kms_helper        270336  1 nvidia_drm
nvidia_modeset       1056768  13 nvidia_drm
nvidia              15831040  491 nvidia_uvm,nvidia_modeset
ipmi_msghandler        69632  2 ipmi_devintf,nvidia
drm                   606208  4 drm_kms_helper,nvidia_drm


system is behaving

- virtualbox is working
- browser works
- Clementine/sound work

Working for me

CC: (none) => brtians1

Comment 5 Dave Hodgins 2021-06-12 20:06:08 CEST
(In reply to Morgan Leijström from comment #3)
> Package management quirks
> 
> I am running kernel 5.12.10
> Using drakrpm, I uninstalled cpupower 5.12.10, and selected for install the
> 5.10.43 variants.
> Problem: it wants to install the "-latest" packages of *5.12.10* :

While drakrpm shows all of the versions available, it uses just the package
name when installing, so always gets the latest version and the default arch.

To install a specific version urpmi must be used.

CC: (none) => davidwhodgins

Comment 6 William Kenney 2021-06-12 21:31:12 CEST
On M7.1 hardware in a Vbox client, M8, Plasma, 64-bit

clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-userspace-headers
urpmi cpupower
 
Linux localhost 5.10.41-desktop-1.mga8 #1 SMP Fri May 28 14:12:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.41-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.41-1.mga8.x86_64 is already installed
Package cpupower-5.10.41-1.mga8.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing

The following 4 packages are going to be installed:

- cpupower-5.10.43-1.mga8.x86_64
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-latest-5.10.43-1.mga8.x86_64
- kernel-userspace-headers-5.10.43-1.mga8.x86_64

Reboot system.

Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.43-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.43-1.mga8.x86_64 is already installed
Package cpupower-5.10.43-1.mga8.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

CC: (none) => wilcal.int

Comment 7 William Kenney 2021-06-12 21:36:14 CEST
On real hardware, M7, Plasma, 64-bit

Packages checked:

kernel-desktop-latest virtualbox kernel-userspace-headers
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest
cpupower dkms-vboxadditions dkms-virtualbox

clear
uname -a
urpmi kernel-desktop-latest
urpmi virtualbox
urpmi x11-driver-video-vboxvideo
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi cpupower
urpmi dkms-vboxadditions
urpmi dkms-virtualbox
 
[root@localhost wilcal]# uname -a
Linux localhost 5.10.41-desktop-1.mga7 #1 SMP Fri May 28 14:28:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox
Package virtualbox-6.1.22-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi x11-driver-video-vboxvideo
Package x11-driver-video-vboxvideo-1.0.0-5.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-userspace-headers
Package kernel-userspace-headers-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi dkms-vboxadditions
Package dkms-vboxadditions-6.1.22-1.mga7.noarch is already installed
[root@localhost wilcal]# urpmi dkms-virtualbox
Package dkms-virtualbox-6.1.22-1.mga7.x86_64 is already installed
[root@localhost wilcal]#  lspci -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
        DeviceName: To Be Filled by O.E.M.
        Subsystem: Dell Device 097c
        Kernel driver in use: i915
        Kernel modules: i915

Boots to working desktop
M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8   x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct

install from update_testing:

kernel-desktop-latest kernel-desktop-devel-latest kernel-userspace-headers virtualbox-kernel-desktop-latest cpupower

The following 7 packages are going to be installed:

- cpupower-5.10.43-1.mga7.x86_64
- kernel-desktop-5.10.43-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-5.10.43-1.mga7-1-1.mga7.x86_64
- kernel-desktop-devel-latest-5.10.43-1.mga7.x86_64
- kernel-userspace-headers-5.10.43-1.mga7.x86_64
- virtualbox-kernel-5.10.43-desktop-1.mga7-6.1.22-1.6.mga7.x86_64
- virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64

clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi virtualbox-kernel-desktop-latest
urpmi cpupower
 
[root@localhost wilcal]# uname -a
Linux localhost 5.10.43-desktop-1.mga7 #1 SMP Fri Jun 11 07:28:47 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-desktop-devel-latest
Package kernel-desktop-devel-latest-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-userspace-headers
Package kernel-userspace-headers-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi virtualbox-kernel-desktop-latest
Package virtualbox-kernel-desktop-latest-6.1.22-1.6.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# lspci -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
        DeviceName: To Be Filled by O.E.M.
        Subsystem: Dell Device 097c
        Kernel driver in use: i915
        Kernel modules: i915

Boots to working desktop

M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8   x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
Comment 8 Morgan Leijström 2021-06-12 22:34:09 CEST
(In reply to Dave Hodgins from comment #5)
> (In reply to Morgan Leijström from comment #3)
> > Package management quirks

> While drakrpm shows all of the versions available, it uses just the package
> name when installing, so always gets the latest version and the default arch.
> 
> To install a specific version urpmi must be used.

I try using drakrpm as that is probably what most users use...

In this second attempt i selected packages in different order, and it decided to install 5.12.8 in addition to the 5.10.43 packages i selected (i guess the -latest packages triggered that), I let it proceed and it succeeded.

  * But sure it must be a bug that drakrpm use a non active repo! *
In the menu there is a link to the media manager where repos can be enabled and disabled but then that is not obeyed!

After I let it install per above I uninstalled the 5.12.8 packages (including kernel-*-latest), and installed cpupower 5.10.43.  Using drakrpm.

Will return later with test results.
Comment 9 William Kenney 2021-06-12 23:52:58 CEST
On M8 hardware in a Vbox client, M7.1, Plasma, 64-bit

clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-userspace-headers
urpmi cpupower
 
[root@localhost wilcal]# uname -a
Linux localhost 5.10.41-desktop-1.mga7 #1 SMP Fri May 28 14:28:33 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-userspace-headers
Package kernel-userspace-headers-5.10.41-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.41-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing

Reboot system.

[root@localhost wilcal]# uname -a
Linux localhost 5.10.43-desktop-1.mga7 #1 SMP Fri Jun 11 07:28:47 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost wilcal]# urpmi kernel-desktop-latest
Package kernel-desktop-latest-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi kernel-userspace-headers
Package kernel-userspace-headers-5.10.43-1.mga7.x86_64 is already installed
[root@localhost wilcal]# urpmi cpupower
Package cpupower-5.10.43-1.mga7.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.
Comment 10 William Kenney 2021-06-12 23:53:40 CEST
On M8 hardware in a Vbox client, M8, Plasma, 64-bit

clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-userspace-headers
urpmi cpupower
 
Linux localhost 5.10.41-desktop-1.mga8 #1 SMP Fri May 28 14:12:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.41-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.41-1.mga8.x86_64 is already installed
Package cpupower-5.10.41-1.mga8.x86_64 is already installed

Boots to a working desktop. Screen resolution is correct. Common apps work.

Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing

The following 4 packages are going to be installed:

- cpupower-5.10.43-1.mga8.x86_64
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-latest-5.10.43-1.mga8.x86_64
- kernel-userspace-headers-5.10.43-1.mga8.x86_64

Reboot system.

Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.43-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.43-1.mga8.x86_64 is already installed
Package cpupower-5.10.43-1.mga8.x86_64 is already installed


Boots to a working desktop. Screen resolution is correct. Common apps work.
Comment 11 William Kenney 2021-06-12 23:54:44 CEST
On real hardware, M8, Plasma, 64-bit

Packages checked:

kernel-desktop-latest virtualbox kernel-userspace-headers
virtualbox-guest-additions virtualbox-kernel-desktop-latest
x11-driver-video-vboxvideo kernel-desktop-devel-latest
cpupower dkms-virtualbox

clear
uname -a
urpmi kernel-desktop-latest
urpmi virtualbox
urpmi x11-driver-video-vboxvideo
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi cpupower
urpmi virtualbox-kernel-desktop-latest
urpmi dkms-virtualbox
 
Linux localhost 5.10.41-desktop-1.mga8 #1 SMP Fri May 28 14:12:17 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.41-1.mga8.x86_64 is already installed
Package virtualbox-6.1.22-1.mga8.x86_64 is already installed
Package x11-driver-video-vboxvideo-1.0.0-6.mga8.x86_64 is already installed
Package kernel-desktop-devel-latest-5.10.41-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.41-1.mga8.x86_64 is already installed
Package cpupower-5.10.41-1.mga8.x86_64 is already installed
Package virtualbox-kernel-desktop-latest-6.1.22-1.5.mga8.x86_64 is already installed
Package dkms-virtualbox-6.1.22-1.mga8.x86_64 is already installed
[root@localhost wilcal]# lspic -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
        DeviceName: To Be Filled by O.E.M.
        Subsystem: Dell Device 097c
        Kernel driver in use: i915
        Kernel modules: i915

Boots to working desktop

M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8   x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct

install from update_testing:

kernel-desktop-latest kernel-desktop-devel-latest virtualbox-kernel-desktop-latest kernel-userspace-headers cpupower virtualbox-kernel-desktop-latest

The following 8 packages are going to be installed:

- cpupower-5.10.43-1.mga8.x86_64
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-5.10.43-1.mga8-1-1.mga8.x86_64
- kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64
- kernel-desktop-latest-5.10.43-1.mga8.x86_64
- kernel-userspace-headers-5.10.43-1.mga8.x86_64
- virtualbox-kernel-5.10.43-desktop-1.mga8-6.1.22-1.6.mga8.x86_64
- virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64

clear
uname -a
urpmi kernel-desktop-latest
urpmi kernel-desktop-devel-latest
urpmi kernel-userspace-headers
urpmi virtualbox-kernel-desktop-latest
urpmi cpupower
 
Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
Package kernel-desktop-latest-5.10.43-1.mga8.x86_64 is already installed
Package kernel-desktop-devel-latest-5.10.43-1.mga8.x86_64 is already installed
Package kernel-userspace-headers-5.10.43-1.mga8.x86_64 is already installed
Package virtualbox-kernel-desktop-latest-6.1.22-1.6.mga8.x86_64 is already installed
Package cpupower-5.10.43-1.mga8.x86_64 is already installed
[root@localhost wilcal]# lspci -k
00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07)
        DeviceName: To Be Filled by O.E.M.
        Subsystem: Dell Device 097c
        Kernel driver in use: i915
        Kernel modules: i915


Boots to working desktop

M7.1 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
M8   x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
Comment 12 William Kenney 2021-06-13 01:59:55 CEST
On M8 hardware in a Vbox client, M8, XFCE, 32-bit

updated from 5.10.16&41-desktop586-1 to 5.10.41-desktop586-1 just fine

uname -a
urpmi kernel-desktop-latest
urpmi kernel-userspace-headers
urpmi cpupower

Linux localhost 5.10.41-desktop586-1.mga8 #1 SMP Fri May 28 13:42:38 UTC 2021 i686 i686 i386 GNU/Linux
Package kernel-desktop-latest-5.10.41-1.mga8.i586 is already installed
Package kernel-userspace-headers-5.10.41-1.mga8.i586 is already installed
Package cpupower-5.10.41-1.mga8.i586 is already installed

Boots to a working desktop, common apps work, screen resoluteion ok

Install from updates_testing:
kernel-desktop-latest cpupower kernel-userspace-headers from updates

The following 4 packages are going to be installed:

- cpupower-5.10.43-1.mga8.i586
- kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586
- kernel-desktop-latest-5.10.43-1.mga8.i586
- kernel-userspace-headers-5.10.43-1.mga8.i586

Fails to boot.
Boot error:

"This kernel requires the following features not present on the CPU: pae
Unable to boot - please use a kernel appropriate for your CPU"

Going backward in boot menu to 5.10.41-desktop586-1 it boots just fine.
Even going back to the original 5.10.16-desktop586-1 works fine

I have no idea what "pae" is
Comment 13 Morgan Leijström 2021-06-13 02:49:32 CEST
(In reply to William Kenney from comment #12)
> On M8 hardware in a Vbox client, M8, XFCE, 32-bit
...
> "This kernel requires the following features not present on the CPU: pae

So a regression, as it did not complain before update.

> I have no idea what "pae" is

https://en.wikipedia.org/wiki/Physical_Address_Extension

In VirtualBox Settings -> System -> CPU there is a checkbox for PAE
Comment 14 Thomas Andrews 2021-06-13 03:11:15 CEST
@wilcal: "pae" https://en.wikipedia.org/wiki/Physical_Address_Extension

The default VirtualBox 32-bit cpu emulates earlier 32-bit models, without things like pae and sse2. These virtual cpus only work with our "kernel-desktop586." 

You installed "kernel-desktop," which is for newer 32-bit cpus, like the P4. You need to remove that and install "kernel-desktop586."
Comment 15 Morgan Leijström 2021-06-13 03:29:02 CEST
Mga8-64 OK here

Everything is updated to testing

$ uname -a
Linux svarten.tribun 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:17:46 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

Hardware: My workstation "svarten": Mainboard: Sabertooth P67, CPU: i7-3770, RAM 16G, GM107 [GeForce GTX 750] using nvidia-current; GeForce 635 series and later, 4k display.  Disk&Filesystem: SSD with /boot/EFI and ext4 /boot, LUKS{LVM {swap, ext4 /home & / } and a spinner at /mnt/spinner

dkms status tells me VirtualBox and nvidia-current are OK.
BOINC detects CUDA and OpenCL

Plasma desktop, using Thunderbird, LibreOffice, Ktorrent, Nextcloud client, flatpak Firefox...
Video with sound in Mageia Firefox ESR
Stress test: While working with other things BOINC use all cores to 100%, videos do not stutter.

VirtualBox running MSW7 64 bit OK: graphics, window resize, bidirectional clipboard, drag file from Dolphin to Explorer, folder sharing write protected and not, folder sharing, USB2 with plugin from upstream using USB stick, internet video playing in Firefox
Comment 16 William Kenney 2021-06-13 03:43:20 CEST
(In reply to Morgan Leijström from comment #13)
> In VirtualBox Settings -> System -> CPU there is a checkbox for PAE

After setting that to PAE all three kernels, 16, 41 & 43, now boot to a working desktop.

uname -a
urpmi kernel-desktop-latest
urpmi kernel-userspace-headers
urpmi cpupower

Linux localhost 5.10.43-desktop-1.mga8 #1 SMP Fri Jun 11 07:55:11 UTC 2021 i686 i686 i386 GNU/Linux
Package kernel-desktop-latest-5.10.43-1.mga8.i586 is already installed
Package kernel-userspace-headers-5.10.43-1.mga8.i586 is already installed
Package cpupower-5.10.43-1.mga8.i586 is already installed

Thanks all

setting this to resolved

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 17 Morgan Leijström 2021-06-13 04:00:54 CEST
Ah yes i believe Thomas A is correct on the kernel i586 version

I guess as usual Thomas B will decide when there is enough tests and validate, and we need an advisory, then pushed before this update is fixed... ;)

Status: RESOLVED => REOPENED
Resolution: FIXED => (none)

Comment 18 Brian Rockwell 2021-06-13 05:13:10 CEST
The following 3 packages are going to be installed:

- cpupower-5.10.43-1.mga7.i586
- kernel-server-5.10.43-1.mga7-1-1.mga7.i586
- kernel-server-latest-5.10.43-1.mga7.i586

-- rebooted

left machine run for several hours. Seems to be working okay

$ uname -a
Linux localhost 5.10.43-server-1.mga7 #1 SMP Fri Jun 11 08:42:14 UTC 2021 i686 i686 i386 GNU/Linux

It works as a file and nextcloud server
Comment 19 Thomas Backlund 2021-06-13 09:29:02 CEST
(In reply to William Kenney from comment #12)
> On M8 hardware in a Vbox client, M8, XFCE, 32-bit
> 
> updated from 5.10.16&41-desktop586-1 to 5.10.41-desktop586-1 just fine
> 
> uname -a
> urpmi kernel-desktop-latest
> urpmi kernel-userspace-headers
> urpmi cpupower
> 
> Linux localhost 5.10.41-desktop586-1.mga8 #1 SMP Fri May 28 13:42:38 UTC
> 2021 i686 i686 i386 GNU/Linux


here you are using  desktop*586* kernel


> The following 4 packages are going to be installed:
> 
> - cpupower-5.10.43-1.mga8.i586
> - kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586
> - kernel-desktop-latest-5.10.43-1.mga8.i586
> - kernel-userspace-headers-5.10.43-1.mga8.i586

Here you installed the i686 optimized one... on unsupported hw

> 
> Fails to boot.
> Boot error:
> 
> "This kernel requires the following features not present on the CPU: pae
> Unable to boot - please use a kernel appropriate for your CPU"


causing the boot to fail
Comment 20 William Kenney 2021-06-13 11:34:08 CEST
(In reply to Thomas Backlund from comment #19)

> Here you installed the i686 optimized one... on unsupported hw

It may be important to note that when I installed this clint about a week ago
I just used the i586 XFCE Live-DVD ISO and just let it default to whatever
kernel it choose itself. Which on the third update of the kernel resulted
in the error. Probably something that a user will rarely encounter.
But still a wrinkle none the less.
Comment 21 Morgan Leijström 2021-06-13 11:38:03 CEST
You mean it automatically selected the wrong kernel as update?
Comment 22 Len Lawrence 2021-06-13 15:58:04 CEST
Switched from the linus kernel, which had been running without problems for 24 hours.
Kernel: 5.10.43-desktop-1.mga8 x86_64
10-Core Intel Core i9-7900X [MT MCP]
NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia v: 460.84

NFS shares mounted automatically.  Other network operations work.
Virtualbox runs 32-bit and 64-bit clients successfully.
Common desktop applications run OK.
Stress tests OK.
Video with vlc, pulseaudio and bluetooth audio working.

CC: (none) => tarazed25

Comment 23 William Kenney 2021-06-13 16:20:43 CEST
(In reply to Morgan Leijström from comment #21)
> You mean it automatically selected the wrong kernel as update?

If PAE is defaulted to be set off when you install from the Live-DVD
the installed kernel appears to be kernel-desktop-5.10.43-1.mga8-1-1.mga8.i586
I'm going to run some testing here today with PAE off and on to see which
kernel is installed.

Here's whats listed in the boot menu after install and update:

5.10.43-desktop-1.mga8
5.10.41-desktop-1.mga8
5.10.16-desktop-1.mga8

But here's what the Live-DVD looks like when booted live and not installed:

PAE/NX off (default)
LiveDVD: 5.10.16-desktop586-1.mga8

PAE/NX on
LiveDVD: 5.10.16-desktop586-1.mga8
Comment 24 Len Lawrence 2021-06-13 16:50:12 CEST
Kernel: 5.10.43-desktop-1.mga7 x86_64
Quad Core: Intel Core i7-4790 type: MT MCP
NVIDIA GM204 [GeForce GTX 970] driver: nvidia v: 460.80
Realtek RTL8111/8168/8411 PCI Express Gigabit Ethernet 
  driver: r8169 

Mate desktop running fine.  NFS shares already mounted after reboot.
Sound and video OK.  Virtualbox running well.
Comment 25 Morgan Leijström 2021-06-13 20:37:43 CEST
(In reply to William Kenney from comment #23)
> when you install from the Live-DVD

The Live installer more or less copies its content *) to the target, and it has the more compatible kernel.

*) including any settings, changes and updates made, user files added...
Comment 26 Thomas Backlund 2021-06-13 21:48:40 CEST
Advisory, added to svn:

type: security
subject: Updated kernel packages fix security vulnerabilities
CVE:
 - CVE-2020-24586
 - CVE-2020-24587
 - CVE-2020-24588
 - CVE-2020-26139
 - CVE-2020-26141
 - CVE-2020-26145
 - CVE-2020-26147
 - CVE-2021-3573
 - CVE-2021-3587
 - CVE-2021-28691
src:
  8:
   core:
     - kernel-5.10.43-1.mga8
     - kmod-virtualbox-6.1.22-1.6.mga8
     - kmod-xtables-addons-3.18-1.6.mga8
  7:
   core:
     - kernel-5.10.43-1.mga7
     - kmod-virtualbox-6.1.22-1.6.mga7
     - kmod-xtables-addons-3.13-28.mga7
description: |
  This kernel update is based on upstream 5.10.43 and fixes atleast the
  following security issues:

  The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
  WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received
  fragments be cleared from memory after (re)connecting to a network. Under
  the right circumstances, when another device sends fragmented frames
  encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary
  network packets and/or exfiltrate user data (CVE-2020-24586).

  The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
  WPA3) and Wired Equivalent Privacy (WEP) doesn't require that all fragments
  of a frame are encrypted under the same key. An adversary can abuse this to
  decrypt selected fragments when another device sends fragmented frames and
  the WEP, CCMP, or GCMP encryption key is periodically renewed
  (CVE-2020-24587).

  The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and
  WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU
  flag in the plaintext QoS header field is authenticated. Against devices
  that support receiving non-SSP A-MSDU frames (which is mandatory as part
  of 802.11n), an adversary can abuse this to inject arbitrary network
  packets (CVE-2020-24588).

  An issue was discovered in the kernel. An Access Point (AP) forwards EAPOL
  frames to other clients even though the sender has not yet successfully
  authenticated to the AP. This might be abused in projected Wi-Fi networks
  to launch denial-of-service attacks against connected clients and makes
  it easier to exploit other vulnerabilities in connected clients
  (CVE-2020-26139).

  An issue was discovered in the kernel ath10k driver. The Wi-Fi
  implementation does not verify the Message Integrity Check (authenticity)
  of fragmented TKIP frames. An adversary can abuse this to inject and
  possibly decrypt packets in WPA or WPA2 networks that support the TKIP
  data-confidentiality protocol (CVE-2020-26141). 
  
  An issue was discovered in the kernel ath10k driver. The WEP, WPA, WPA2,
  and WPA3 implementations accept second (or subsequent) broadcast fragments
  even when sent in plaintext and process them as full unfragmented frames.
  An adversary can abuse this to inject arbitrary network packets independent
  of the network configuration (CVE-2020-26145).

  An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and
  WPA3 implementations reassemble fragments even though some of them were
  sent in plaintext. This vulnerability can be abused to inject packets and/
  or exfiltrate selected fragments when another device sends fragmented
  frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used
  (CVE-2020-26147).

  A use after free vulnerability has been found in the hci_sock_bound_ioctl()
  function of the Linux kernel. It can allow attackers to corrupt kernel
  heaps (kmalloc-8k to be specific) and adopt further exploitations
  (CVE-2021-3573).

  There is a null pointer dereference in llcp_sock_getname in net/nfc/
  llcp_sock.c of the Linux kernel. An unprivileged user can trigger this bug
  and cause denial of service (CVE-2021-3587).

  There is a guest triggered use-after-free in Linux xen-netback. A malicious
  or buggy network PV frontend can force Linux netback to disable the
  interface and terminate the receive kernel thread associated with queue 0
  in response to the frontend sending a malformed packet. Such kernel thread
  termination will lead to a use-after-free in Linux netback when the backend
  is destroyed, as the kernel thread associated with queue 0 will have already
  exited and thus the call to kthread_stop will be performed against a stale
  pointer. A malicious or buggy frontend driver can trigger a dom0 crash.
  Privilege escalation and information leaks cannot be ruled out.
  (CVE-2021-28691 / XSA-374).

  Other fixes in this update:
  - bpf: Forbid trampoline attach for functions with variable arguments
  - bpf: Add deny list of btf ids check for tracing programs
  - net/nfc/rawsock.c: fix a permission check bug
  - proc: Track /proc/$pid/attr/ opener mm_struct
  - RDS tcp loopback connection can hang

  For other upstream fixes, see the referenced changelogs.
references:
 - https://bugs.mageia.org/show_bug.cgi?id=29106
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.42
 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.43
 - https://xenbits.xen.org/xsa/advisory-374.html

Keywords: (none) => advisory

Comment 27 Thomas Backlund 2021-06-13 22:04:25 CEST
Enough tests, flushing out

Keywords: (none) => validated_update
Whiteboard: MGA7TOO => MGA7TOO, MGA8-64-OK, MGA8-32-OK, MGA7-64-OK, MGA7-32-OK
CC: (none) => sysadmin-bugs

Comment 28 Mageia Robot 2021-06-13 23:34:56 CEST
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2021-0257.html

Status: REOPENED => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.