Security and bugfixes, advisory will follow: SRPMS: kernel-5.10.60-2.mga8.src.rpm kmod-virtualbox-6.1.26-1.2.mga8.src.rpm kmod-xtables-addons-3.18-1.20.mga8.src.rpm i586: bpftool-5.10.60-2.mga8.i586.rpm cpupower-5.10.60-2.mga8.i586.rpm cpupower-devel-5.10.60-2.mga8.i586.rpm kernel-desktop-5.10.60-2.mga8-1-1.mga8.i586.rpm kernel-desktop586-5.10.60-2.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-5.10.60-2.mga8-1-1.mga8.i586.rpm kernel-desktop586-devel-latest-5.10.60-2.mga8.i586.rpm kernel-desktop586-latest-5.10.60-2.mga8.i586.rpm kernel-desktop-devel-5.10.60-2.mga8-1-1.mga8.i586.rpm kernel-desktop-devel-latest-5.10.60-2.mga8.i586.rpm kernel-desktop-latest-5.10.60-2.mga8.i586.rpm kernel-doc-5.10.60-2.mga8.noarch.rpm kernel-server-5.10.60-2.mga8-1-1.mga8.i586.rpm kernel-server-devel-5.10.60-2.mga8-1-1.mga8.i586.rpm kernel-server-devel-latest-5.10.60-2.mga8.i586.rpm kernel-server-latest-5.10.60-2.mga8.i586.rpm kernel-source-5.10.60-2.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.10.60-2.mga8.noarch.rpm kernel-userspace-headers-5.10.60-2.mga8.i586.rpm libbpf0-5.10.60-2.mga8.i586.rpm libbpf-devel-5.10.60-2.mga8.i586.rpm perf-5.10.60-2.mga8.i586.rpm xtables-addons-kernel-5.10.60-desktop-2.mga8-3.18-1.20.mga8.i586.rpm xtables-addons-kernel-5.10.60-desktop586-2.mga8-3.18-1.20.mga8.i586.rpm xtables-addons-kernel-5.10.60-server-2.mga8-3.18-1.20.mga8.i586.rpm xtables-addons-kernel-desktop586-latest-3.18-1.20.mga8.i586.rpm xtables-addons-kernel-desktop-latest-3.18-1.20.mga8.i586.rpm xtables-addons-kernel-server-latest-3.18-1.20.mga8.i586.rpm x86_64: bpftool-5.10.60-2.mga8.x86_64.rpm cpupower-5.10.60-2.mga8.x86_64.rpm cpupower-devel-5.10.60-2.mga8.x86_64.rpm kernel-desktop-5.10.60-2.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-5.10.60-2.mga8-1-1.mga8.x86_64.rpm kernel-desktop-devel-latest-5.10.60-2.mga8.x86_64.rpm kernel-desktop-latest-5.10.60-2.mga8.x86_64.rpm kernel-doc-5.10.60-2.mga8.noarch.rpm kernel-server-5.10.60-2.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-5.10.60-2.mga8-1-1.mga8.x86_64.rpm kernel-server-devel-latest-5.10.60-2.mga8.x86_64.rpm kernel-server-latest-5.10.60-2.mga8.x86_64.rpm kernel-source-5.10.60-2.mga8-1-1.mga8.noarch.rpm kernel-source-latest-5.10.60-2.mga8.noarch.rpm kernel-userspace-headers-5.10.60-2.mga8.x86_64.rpm lib64bpf0-5.10.60-2.mga8.x86_64.rpm lib64bpf-devel-5.10.60-2.mga8.x86_64.rpm perf-5.10.60-2.mga8.x86_64.rpm virtualbox-kernel-5.10.60-desktop-2.mga8-6.1.26-1.2.mga8.x86_64.rpm virtualbox-kernel-5.10.60-server-2.mga8-6.1.26-1.2.mga8.x86_64.rpm virtualbox-kernel-desktop-latest-6.1.26-1.2.mga8.x86_64.rpm virtualbox-kernel-server-latest-6.1.26-1.2.mga8.x86_64.rpm xtables-addons-kernel-5.10.60-desktop-2.mga8-3.18-1.20.mga8.x86_64.rpm xtables-addons-kernel-5.10.60-server-2.mga8-3.18-1.20.mga8.x86_64.rpm xtables-addons-kernel-desktop-latest-3.18-1.20.mga8.x86_64.rpm xtables-addons-kernel-server-latest-3.18-1.20.mga8.x86_64.rpm
Mageia 8 x86_64 kernel-desktop working fine on three workstations. Intel Core 2 Duo E8400 Intel P45 chipset Radeon HD 4650 Intel Core i7-4770K Intel Z87 Express chipset Radeon R9 270X AMD Ryzen 7 3800x AMD X570 chipset Radeon RX5700
AMD x3-450, Nvidia 730GT (390 driver) - phys hardware The following 5 packages are going to be installed: - cpupower-5.10.60-2.mga8.x86_64 - kernel-desktop-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.10.60-2.mga8.x86_64 - kernel-desktop-latest-5.10.60-2.mga8.x86_64 120MB of additional disk space will be used. ---rebooted--- $ uname -a Linux localhost.localdomain 5.10.60-desktop-2.mga8 #1 SMP Wed Aug 18 11:12:31 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux # lsmod | grep nvidia nvidia_uvm 925696 0 nvidia_drm 53248 1 drm_kms_helper 270336 1 nvidia_drm nvidia_modeset 1056768 10 nvidia_drm nvidia 15831040 392 nvidia_uvm,nvidia_modeset ipmi_msghandler 69632 2 ipmi_devintf,nvidia drm 606208 4 drm_kms_helper,nvidia_drm nextcloud client working, firefox, office, networking
CC: (none) => brtians1
The desktop kernel is working fine here on three 64-bit Intel systems, one of them a laptop; wifi, LAN, NFS shares, bluetooth audio, desktop applications. Quad Core Intel Core i7-4790 NVIDIA GM204 [GeForce GTX 970] driver: nvidia v: 460.84 Quad Core Intel Core i7-5700HQ NVIDIA GM204M [GeForce GTX 965M] driver: nouveau 10-Core Intel Core i9-7900X NVIDIA GP102 [GeForce GTX 1080 Ti] driver: nvidia v: 460.84
CC: (none) => tarazed25
MGA8-64 Plasma on Lenovo B50 No installation issues. Wifi-internet, NFS access, newspapersite with text, photos and videos, fie types like xls, pdf, odt, odp, mpeg, jpg, txt all OK. No ill effects seen.
CC: (none) => herman.viaene
On M8 hardware in a Vbox client, M8, Xfce, 32-bit Linux localhost 5.10.56-desktop586-1.mga8 #1 SMP Wed Aug 4 11:32:23 UTC 2021 i686 i686 i386 GNU/Linux Package kernel-desktop-latest-5.10.56-1.mga8.i586 is already installed Package kernel-userspace-headers-5.10.56-1.mga8.i586 is already installed Package cpupower-5.10.56-1.mga8.i586 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing The following 4 packages are going to be installed: - cpupower-5.10.60-2.mga8.i586 - kernel-desktop-5.10.60-2.mga8-1-1.mga8.i586 - kernel-desktop-latest-5.10.60-2.mga8.i586 - kernel-userspace-headers-5.10.60-2.mga8.i586 Reboot system. Linux localhost 5.10.60-desktop-2.mga8 #1 SMP Wed Aug 18 11:48:56 UTC 2021 i686 i686 i386 GNU/Linux Package kernel-desktop-latest-5.10.60-2.mga8.i586 is already installed Package kernel-userspace-headers-5.10.60-2.mga8.i586 is already installed Package cpupower-5.10.60-2.mga8.i586 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work.
CC: (none) => wilcal.int
On M8 hardware in a Vbox client, M8, Plasma, 64-bit clear uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower Linux localhost 5.10.52-desktop-1.mga8 #1 SMP Tue Jul 20 17:00:24 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.52-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.52-1.mga8.x86_64 is already installed Package cpupower-5.10.52-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers from updates testing The following 4 packages are going to be installed: - cpupower-5.10.60-2.mga8.x86_64 - kernel-desktop-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-latest-5.10.60-2.mga8.x86_64 - kernel-userspace-headers-5.10.60-2.mga8.x86_64 Reboot system. Linux localhost 5.10.60-desktop-2.mga8 #1 SMP Wed Aug 18 11:12:31 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.60-2.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.60-2.mga8.x86_64 is already installed Package cpupower-5.10.60-2.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work.
On real hardware, M8, Plasma, 64-bit Packages checked: kernel-desktop-latest virtualbox kernel-userspace-headers virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower dkms-virtualbox Boots to working desktop M8 i586 Vbox Xfce Client, boots to a working desktop - Screen size correct M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct install from update_testing: kernel-desktop-latest kernel-desktop-devel-latest virtualbox-kernel-desktop-latest kernel-userspace-headers cpupower virtualbox-kernel-desktop-latest The following 9 packages are going to be installed: - cpupower-5.10.60-2.mga8.x86_64 - kernel-desktop-5.10.16-1.mga8-1-1.mga8.x86_64 - kernel-desktop-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.10.60-2.mga8.x86_64 - kernel-desktop-latest-5.10.60-2.mga8.x86_64 - kernel-userspace-headers-5.10.60-2.mga8.x86_64 - xtables-addons-kernel-5.10.16-desktop-1.mga8-3.13-32.mga8.x86_64 - xtables-addons-kernel-desktop-latest-3.13-32.mga8.x86_64 reboot system Common apps work M8 i586 Vbox Xfce Client, boots to a working desktop - Screen size correct M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
Phys Hardware, laptop, A6-9224 - APU, GNOME Installed desktop, cpupower. Suspend/sleep works, utilities and programs working all good here
Advisory, added to svn: type: security subject: Updated kernel packages fix security vulnerabilities CVE: - CVE-2020-3702 - CVE-2021-3653 - CVE-2021-3656 - CVE-2021-38205 src: 8: core: - kernel-5.10.60-2.mga8 - kmod-virtualbox-6.1.26-1.2.mga8 - kmod-xtables-addons-3.18-1.20.mga8 description: | This kernel update is based on upstream 5.10.60 and fixes atleast the following security issues: Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic in ath9k (CVE-2020-3702). A missing validation of the "int_ctl" VMCB field allows a malicious L1 guest to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. The L2 guest is able to write to a limited but still relatively large subset of the host physical memory, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape (CVE-2021-3653). A missing validation of the the "virt_ext" VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. Under these circumstances, the L2 guest is able to run VMLOAD/VMSAVE unintercepted, and thus read/write portions of the host physical memory, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape (CVE-2021-3656). drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (CVE-2021-38205). Other fixes in this update: - cfi_cmdset_0002: fix crash when erasing/writing AMD cards For other upstream fixes, see the referenced changelogs. references: - https://bugs.mageia.org/show_bug.cgi?id=29384 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.57 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.58 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.59 - https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.60
Keywords: (none) => advisory
Switched from the desktop to the server kernel on this machine: Quad Core Intel Core i7-4790 NVIDIA GM204 [GeForce GTX 970] Everything looks OK except for bluetooth. rfkill state is set at login. bluetoothctl sees the USB BT adapter and responds to power on, trust and list but scan on finds only external adapters. Using blueman-assistant or bluedevil-wizard does not help. A device scan finds the BT controllers on nearby computers. It used to lock on to the nearby BT audio speaker without trouble. Now nothing. Going to go back to the desktop kernel and check if it still works there.
No longer works on the desktop kernel now. Beginning to wonder if there is some cross-talk going on here because of previous pairings. Switching off bluetooth on the nearby machines had no effect. As there is no problem on other computers this should probably be ignored - the dongle is Asustek so it might be firmware or something like that that causes this problem. Wasted nearly three hours on this problem so best to forget it.
@len: does it work if you boot an older kernel ?
@Thomas: It certainly worked before with older kernels. And I now have it working with the linus kernel on the problem machine. It works with the latest kernel on another machine. That inclines me to think that the fault was operational - in other words I probably did something wrong - hard to figure out what though. It is a simple enough procedure. Shall have a look at older kernels later.
Referring to comment 13. Regressed to 5.10.56-desktop-1.mga8 and found no problem with connecting to BT audio.
An earlier linus kernel also worked fine for bluetooth audio.
ok, that's interesting considering I dont have any additional patches regarding bluetooth compared to kernel-linus...
hm, what bluetooth hw in the computer ?
MGA8 64 with core I3 and 4GO RAM. Graphic card Nvidia Geforce 520M with optimus technology driver 390. Driver broadcom-wl (6.30.223.271-61.mga8.nonfree). Installation OK, the compilation was done without any problem. Switching graphic card with mageia-prime without problem. classic use documentation, internet, mail etc ok ------------------------------------------------------------------------------------------------------------------------------------------------------------------ MGA8 VM 64 with LXQt Installation Kernel ok after reboot.
CC: (none) => guillaume.royer
(In reply to Thomas Backlund from comment #17) > hm, what bluetooth hw in the computer ? Yes here, tested Bluetooth ok for me
@Thomas, comment 17: On the machine where I had trouble it is an Asustek USB dongle, talking to an AudioPro C10. I don't think there was a real problem - just finger trouble. Bluetooth on Mageia now looks mature, and user friendly with either bluedevil or blueman.
ok, thanks for all tests, flushing out
Whiteboard: (none) => MGA8-64-OK, MGA8-32-OKCC: (none) => sysadmin-bugsKeywords: (none) => validated_update
An update for this issue has been pushed to the Mageia Updates repository. https://advisories.mageia.org/MGASA-2021-0409.html
Status: NEW => RESOLVEDResolution: (none) => FIXED
Blocks: (none) => 29389
Blocks: (none) => 29395
Blocks: (none) => 29418
On M8 hardware in a Vbox client, M8, Xfce, 32-bit clear uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower urpmi virtualbox-guest-additions Linux localhost 5.10.70-desktop586-1.mga8 #1 SMP Thu Sep 30 09:40:34 UTC 2021 i686 i686 i386 GNU/Linux Package kernel-desktop-latest-5.10.70-1.mga8.i586 is already installed Package kernel-userspace-headers-5.10.70-1.mga8.i586 is already installed Package cpupower-5.10.70-1.mga8.i586 is already installed Package virtualbox-guest-additions-6.1.26-1.mga8.i586 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers virtualbox-guest-additions from updates testing The following 5 packages are going to be installed: - cpupower-5.10.75-1.mga8.i586 - kernel-desktop-5.10.75-1.mga8-1-1.mga8.i586 - kernel-desktop-latest-5.10.75-1.mga8.i586 - kernel-userspace-headers-5.10.75-1.mga8.i586 - virtualbox-guest-additions-6.1.26-1.mga8.i586 Reboot system. Linux localhost 5.10.75-desktop-1.mga8 #1 SMP Wed Oct 20 12:06:39 UTC 2021 i686 i686 i386 GNU/Linux Package kernel-desktop-latest-5.10.75-1.mga8.i586 is already installed Package kernel-userspace-headers-5.10.75-1.mga8.i586 is already installed Package cpupower-5.10.75-1.mga8.i586 is already installed Package virtualbox-guest-additions-6.1.28-1.mga8.i586 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work.
On M8 hardware in a Vbox client, M8, Plasma, 64-bit clear uname -a urpmi kernel-desktop-latest urpmi kernel-userspace-headers urpmi cpupower urpmi virtualbox-guest-additions Linux localhost 5.10.70-desktop-1.mga8 #1 SMP Thu Sep 30 09:41:26 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.70-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.70-1.mga8.x86_64 is already installed Package cpupower-5.10.70-1.mga8.x86_64 is already installed Package virtualbox-guest-additions-6.1.26-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work. Install kernel-desktop-latest cpupower kernel-userspace-headers virtualbox-guest-additions from updates testing The following 8 packages are going to be installed: - cpupower-5.10.75-1.mga8.x86_64 - kernel-desktop-5.10.75-1.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.10.75-1.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.10.75-1.mga8.x86_64 - kernel-desktop-latest-5.10.75-1.mga8.x86_64 - kernel-userspace-headers-5.10.75-1.mga8.x86_64 - virtualbox-kernel-5.10.70-desktop-1.mga8-6.1.28-1.mga8.x86_64 - virtualbox-kernel-desktop-latest-6.1.28-1.mga8.x86_64 Reboot system. Linux localhost 5.10.75-desktop-1.mga8 #1 SMP Wed Oct 20 10:23:35 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.75-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.75-1.mga8.x86_64 is already installed Package cpupower-5.10.75-1.mga8.x86_64 is already installed Package virtualbox-guest-additions-6.1.28-1.mga8.x86_64 is already installed Boots to a working desktop. Screen resolution is correct. Common apps work.
On real hardware, M8, Plasma, 64-bit Packages checked: kernel-desktop-latest virtualbox kernel-userspace-headers virtualbox-guest-additions virtualbox-kernel-desktop-latest x11-driver-video-vboxvideo kernel-desktop-devel-latest cpupower dkms-virtualbox clear uname -a urpmi kernel-desktop-latest urpmi virtualbox urpmi x11-driver-video-vboxvideo urpmi kernel-desktop-devel-latest urpmi kernel-userspace-headers urpmi cpupower urpmi virtualbox-kernel-desktop-latest urpmi dkms-virtualbox Linux localhost 5.10.70-desktop-1.mga8 #1 SMP Thu Sep 30 09:41:26 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.70-1.mga8.x86_64 is already installed Package virtualbox-6.1.26-1.mga8.x86_64 is already installed Package x11-driver-video-vboxvideo-1.0.0-6.mga8.x86_64 is already installed Package kernel-desktop-devel-latest-5.10.70-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.70-1.mga8.x86_64 is already installed Package cpupower-5.10.70-1.mga8.x86_64 is already installed Package virtualbox-kernel-desktop-latest-6.1.26-1.6.mga8.x86_64 is already installed Package dkms-virtualbox-6.1.26-1.mga8.x86_64 is already installed Boots to working desktop M8 i586 Vbox Xfce Client, boots to a working desktop - Screen size correct M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct install from update_testing: kernel-desktop-latest kernel-desktop-devel-latest virtualbox-kernel-desktop-latest kernel-userspace-headers cpupower virtualbox-kernel-desktop-latest Vbox: The following 9 packages are going to be installed: - cpupower-5.10.60-2.mga8.x86_64 - kernel-desktop-5.10.16-1.mga8-1-1.mga8.x86_64 - kernel-desktop-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-5.10.60-2.mga8-1-1.mga8.x86_64 - kernel-desktop-devel-latest-5.10.60-2.mga8.x86_64 - kernel-desktop-latest-5.10.60-2.mga8.x86_64 - kernel-userspace-headers-5.10.60-2.mga8.x86_64 - xtables-addons-kernel-5.10.16-desktop-1.mga8-3.13-32.mga8.x86_64 - xtables-addons-kernel-desktop-latest-3.13-32.mga8.x86_64 reboot system Linux localhost 5.10.75-desktop-1.mga8 #1 SMP Wed Oct 20 10:23:35 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux Package kernel-desktop-latest-5.10.75-1.mga8.x86_64 is already installed Package virtualbox-6.1.28-1.mga8.x86_64 is already installed Package x11-driver-video-vboxvideo-1.0.0-6.mga8.x86_64 is already installed Package kernel-desktop-devel-latest-5.10.75-1.mga8.x86_64 is already installed Package kernel-userspace-headers-5.10.75-1.mga8.x86_64 is already installed Package cpupower-5.10.75-1.mga8.x86_64 is already installed Package virtualbox-kernel-desktop-latest-6.1.28-1.mga8.x86_64 is already installed Package dkms-virtualbox-6.1.28-1.mga8.x86_64 is already installed 00:02.0 VGA compatible controller: Intel Corporation Iris Plus Graphics G1 (Ice Lake) (rev 07) DeviceName: To Be Filled by O.E.M. Subsystem: Dell Device 097c Kernel driver in use: i915 Kernel modules: i915 M8 i586 Vbox Xfce Client, boots to a working desktop - Screen size correct M8 x86_64 Vbox Plasma Client, boots to a working desktop - Screen size correct
@Wilcal, you are reporting tests on wrong bug