Bug 32792 - Update request: kernel-linus 6.6.14
Summary: Update request: kernel-linus 6.6.14
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: 9
Hardware: All Linux
Priority: Normal normal
Target Milestone: ---
Assignee: QA Team
QA Contact: Sec team
URL: https://cdn.kernel.org/pub/linux/kern...
Whiteboard: MGA9-64-OK MGA9-32-OK
Keywords: FOR_ERRATA9, advisory, validated_update
Depends on: 32786 32791
Blocks:
  Show dependency treegraph
 
Reported: 2024-01-30 20:32 CET by Marja Van Waes
Modified: 2024-02-09 09:24 CET (History)
12 users (show)

See Also:
Source RPM: kernel-linus-6.5.13-2.mga9
CVE: CVE-2023-6610, CVE-2023-46838
Status comment:


Attachments

Description Marja Van Waes 2024-01-30 20:32:45 CET
+++ This bug was initially created as a clone of Bug #32786 +++

Mageia 9 still has kernel 6.5.13 in /release, whose branch reached EOL two months ago. It's time to upgrade to the longterm 6.6 branch. kernel 6.6.x should not be in /backports because users should not stay on an unsupported branch.

Of course, kernel-linus should be updated to 6.6.14, too.

Suggested Advisory:

CVE-2023-6610
CVE-2023-46838

Upstream version 6.6.14 with many bugfixes and at least the following security fixes:

An out-of-bounds read vulnerability was found in smb2_dump_detail in fs/smb/client/smb2ops.c in the Linux Kernel. This issue could allow a local attacker to crash the system or leak internal kernel information. (CVE-2023-6610)

An unprivileged guest can cause Denial of Service (DoS) of the host by
sending network packets to the backend, causing the backend to crash.
Data corruption or privilege escalation have not been ruled out.
https://xenbits.xen.org/xsa/advisory-448.html (CVE-2023-46838)

References are in the URL: field of this report.

SRPM: kernel-linus-6.6.14-1.mga9.src.rpm

RPMs (x86_64 repo):
kernel-linus-6.6.14-1.mga9.x86_64.rpm
kernel-linus-devel-6.6.14-1.mga9.x86_64.rpm
kernel-linus-devel-latest-6.6.14-1.mga9.x86_64.rpm
kernel-linus-doc-6.6.14-1.mga9.noarch.rpm
kernel-linus-latest-6.6.14-1.mga9.x86_64.rpm
kernel-linus-source-6.6.14-1.mga9.noarch.rpm

RPMs (i586 repo):
kernel-linus-6.6.14-1.mga9.i586.rpm
kernel-linus-devel-6.6.14-1.mga9.i586.rpm
kernel-linus-devel-latest-6.6.14-1.mga9.i586.rpm
kernel-linus-doc-6.6.14-1.mga9.noarch.rpm
kernel-linus-latest-6.6.14-1.mga9.i586.rpm
kernel-linus-source-6.6.14-1.mga9.noarch.rpm
Marja Van Waes 2024-01-30 20:36:04 CET

Assignee: bugsquad => qa-bugs

Comment 1 Lewis Smith 2024-01-30 20:41:48 CET
This is confusing. Why just kernel-linus?
Is the same release already in Backports? If so, should it not be moved to core/updates_testing then core/updates? Has it already been QA'd?

CC: (none) => lewyssmith

Comment 2 Thomas Andrews 2024-01-30 20:59:43 CET
TMB always kept kernel-linus in a separate bug to differentiate it from the other kernels. The other kernels include our patches, while kernel-linus is closer to the "vanilla" Linux kernel. 

I can't confirm my speculation, but I think he did this to avoid contamination of kernel-linus by mistake during development.
Marja Van Waes 2024-01-30 21:55:39 CET

Keywords: (none) => advisory

Comment 3 Morgan Leijström 2024-01-31 10:37:48 CET
Yes, and sometimes -desktop and -server kernels get more iterations, example
6.5.13 landed on -2 for linus, -6 for the others.

Like for the other kernels, his bug should depend on updates of 
dkms-anbox, mate-applets and gnome-applets

https://bugs.mageia.org/show_bug.cgi?id=32786#c62
Comment 4 Morgan Leijström 2024-01-31 17:21:34 CET
(In reply to Morgan Leijström from comment #3)

> Like for the other kernels, his bug should depend on updates of 
> dkms-anbox, mate-applets and gnome-applets

No need, because this bug depends on the 6.6.16 desktop/server bug.
Comment 5 katnatek 2024-01-31 22:10:27 CET
Tested in Real Hardware Mageia 9 i586 lxqt

wifi works
webcam works
sound works
mount isos with cdemu-client that require dkms-vhba works
Comment 6 katnatek 2024-01-31 23:12:07 CET Comment hidden (obsolete)
Comment 7 katnatek 2024-01-31 23:20:17 CET
Like other 6.6.14 kernels release 1 this kernel make my card use radeon driver instead amdgpu in my x86_64 system

inxi -F

System:
  Host: phoenix Kernel: 6.6.14-1.mga9 arch: x86_64 bits: 64 Desktop: LXQt
    v: 1.4.0 Distro: Mageia 9
Machine:
  Type: Desktop Mobo: Intel model: DH55HC v: AAE70933-505
    serial: <superuser required> BIOS: Intel v: TCIBX10H.86A.0037.2010.0614.1712
    date: 06/14/2010
CPU:
  Info: dual core model: Intel Core i5 650 bits: 64 type: MT MCP cache:
    L2: 512 KiB
  Speed (MHz): avg: 1299 min/max: 1197/3193 cores: 1: 1356 2: 1197 3: 1449
    4: 1197
Graphics:
  Device-1: AMD Cape Verde XT [Radeon HD 7770/8760 / R7 250X] driver: radeon
    v: kernel
  Display: x11 server: X.org v: 1.21.1.8 with: Xwayland v: 22.1.9 driver: X:
    loaded: radeon unloaded: fbdev,modesetting,vesa dri: radeonsi gpu: radeon
    resolution: 1360x768~60Hz
  API: OpenGL v: 4.5 Mesa 23.3.3 renderer: VERDE (radeonsi LLVM 15.0.6 DRM
    2.50 6.6.14-1.mga9)
Audio:
  Device-1: Intel 5 Series/3400 Series High Definition Audio
    driver: snd_hda_intel
  Device-2: AMD Oland/Hainan/Cape Verde/Pitcairn HDMI Audio [Radeon HD 7000
    Series] driver: snd_hda_intel
  API: ALSA v: k6.6.14-1.mga9 status: kernel-api
  Server-1: PulseAudio v: 16.1 status: active
Network:
  Device-1: Intel 82578DC Gigabit Network driver: e1000e
  IF: eno1 state: up speed: 100 Mbps duplex: full mac: e0:69:95:dd:cd:47
  IF-ID-1: virbr0 state: down mac: 52:54:00:62:71:70
Drives:
  Local Storage: total: 298.09 GiB used: 206.88 GiB (69.4%)
  ID-1: /dev/sda vendor: Western Digital model: WD3200BEKT-60V5T1
    size: 298.09 GiB
Partition:
  ID-1: / size: 49.2 GiB used: 14.26 GiB (29.0%) fs: ext4 dev: /dev/sda1
  ID-2: /home size: 238.91 GiB used: 192.61 GiB (80.6%) fs: ext4
    dev: /dev/sda6
Swap:
  ID-1: swap-1 type: partition size: 4 GiB used: 0 KiB (0.0%) dev: /dev/sda5
Sensors:
  System Temperatures: cpu: 44.0 C mobo: N/A gpu: radeon temp: 43.0 C
  Fan Speeds (RPM): N/A
Info:
  Processes: 235 Uptime: 2m Memory: 9.59 GiB used: 1.11 GiB (11.6%)


The rest is working as expected (Sorry in previous message I boot on wrong kernel)
Comment 8 Morgan Leijström 2024-01-31 23:44:31 CET
Comment 7 implies also linus should be updated like desktop -2 version.

Keywords: (none) => feedback

Frédéric "LpSolit" Buclin 2024-02-01 00:07:27 CET

CC: LpSolit => (none)

Comment 9 Morgan Leijström 2024-02-02 01:32:53 CET
@Giuseppe?

(In reply to katnatek from comment #7)
> Like other 6.6.14 kernels release 1 this kernel make my card use radeon
> driver instead amdgpu in my x86_64 system

(In reply to Morgan Leijström from comment #8)
> Comment 7 implies also linus should be updated like desktop -2 version.
Morgan Leijström 2024-02-04 19:37:40 CET

Status comment: (none) => Need update? Comment 7

Comment 10 Giuseppe Ghibò 2024-02-04 21:29:28 CET
(In reply to Morgan Leijström from comment #9)

> @Giuseppe?
> 
> (In reply to katnatek from comment #7)
> > Like other 6.6.14 kernels release 1 this kernel make my card use radeon
> > driver instead amdgpu in my x86_64 system
> 
> (In reply to Morgan Leijström from comment #8)
> > Comment 7 implies also linus should be updated like desktop -2 version.

Indeed it doesn't require the patch. kernel-desktop-6.6.14-2 had a previous patch reworked to get some old card treated with amdgpu. kernel-linus is usually kept without patches, close to stock upstream kernel, unless some rare case of security fixes or obvious crashes requiring a patch.
Comment 11 Morgan Leijström 2024-02-04 22:34:55 CET
OK thanks for the info.

I believe this update is good to go when the other kernels are good to go.
(waiting for dkms-anbox and maybe other)

Keywords: feedback => (none)
Status comment: Need update? Comment 7 => (none)

Comment 13 katnatek 2024-02-05 15:22:09 CET
(In reply to Giuseppe Ghibò from comment #10)
> (In reply to Morgan Leijström from comment #9)
> 
> > @Giuseppe?
> > 
> > (In reply to katnatek from comment #7)
> > > Like other 6.6.14 kernels release 1 this kernel make my card use radeon
> > > driver instead amdgpu in my x86_64 system
> > 
> > (In reply to Morgan Leijström from comment #8)
> > > Comment 7 implies also linus should be updated like desktop -2 version.
> 
> Indeed it doesn't require the patch. kernel-desktop-6.6.14-2 had a previous
> patch reworked to get some old card treated with amdgpu. kernel-linus is
> usually kept without patches, close to stock upstream kernel, unless some
> rare case of security fixes or obvious crashes requiring a patch.

I think this will need a Errata with the Morgan's tip of delete /etc/X11/xorg.conf

Keywords: (none) => FOR_ERRATA9
Whiteboard: (none) => MGA9-64-OK MGA9-32-OK

Comment 14 Morgan Leijström 2024-02-05 23:17:18 CET
(In reply to katnatek from comment #13)
> I think this will need a Errata with the Morgan's tip of delete
> /etc/X11/xorg.conf

Ref: Bug 32786 Comment 24

Are we sure this works OK?
Comment 15 katnatek 2024-02-06 02:14:34 CET
(In reply to Morgan Leijström from comment #14)
> (In reply to katnatek from comment #13)
> > I think this will need a Errata with the Morgan's tip of delete
> > /etc/X11/xorg.conf
> 
> Ref: Bug 32786 Comment 24
> 
> Are we sure this works OK?

Works for me If boot in kernel server I get amdgpu

inxi -F
System:
  Host: phoenix Kernel: 6.6.14-server-2.mga9 arch: x86_64 bits: 64
    Desktop: LXQt v: 1.4.0 Distro: Mageia 9
Machine:
  Type: Desktop Mobo: Intel model: DH55HC v: AAE70933-505
    serial: <superuser required> BIOS: Intel v: TCIBX10H.86A.0037.2010.0614.1712
    date: 06/14/2010
CPU:
  Info: dual core model: Intel Core i5 650 bits: 64 type: MT MCP cache:
    L2: 512 KiB
  Speed (MHz): avg: 1309 min/max: 1197/3193 cores: 1: 1312 2: 1390 3: 1248
    4: 1286
Graphics:
  Device-1: AMD Cape Verde XT [Radeon HD 7770/8760 / R7 250X] driver: amdgpu
    v: kernel
  Display: x11 server: X.org v: 1.21.1.8 with: Xwayland v: 22.1.9 driver: X:
    loaded: amdgpu unloaded: fbdev,modesetting,vesa dri: radeonsi gpu: amdgpu
    resolution: 1360x768~60Hz
  API: OpenGL v: 4.6 Mesa 23.3.3 renderer: AMD Radeon HD 7700 Series
    (radeonsi verde LLVM 15.0.6 DRM 3.54 6.6.14-server-2.mga9)

And I don't regenerate /etc/X11/xorg.conf because drakx11 select amdgpu
Comment 16 Thomas Andrews 2024-02-07 01:25:48 CET
MGA9-64 Plasma, Dell e520, Core2Quad, AMD HD 8570 (Oland - Southern Islands) graphics.

I ran into the same problem as katnatek, except that my machine wouldn't boot even with the radeon driver. I'm not surprised by this, as it would not boot any of the Mageia 8 kernels with anything but the amdgpu driver. In Mageia 8, sddm would fail. I suspect it could be the same here. 

TMB and I fought that battle some time ago, because the Live Mageia 8 Plasma test isos would not boot on this hardware. I don't remember ever trying kernel-linus on this hardware before, so I have no idea how long it's been since it may have worked with it. I have another set of hardware that won't work with kernel -linus because it needs one of our patches to make it work with the radeon driver and modern kernels - Foolishness, my Dell Inspiron 5100.

If our mainstream kernels won't work with the older hardware, we should try to patch them so they do, but I agree with comment 10 that we don't need to patch kernel-linus for this old hardware.

Validating.

Keywords: (none) => validated_update
CC: (none) => sysadmin-bugs

Comment 17 Giuseppe Ghibò 2024-02-07 13:54:48 CET
(In reply to Thomas Andrews from comment #16)
> MGA9-64 Plasma, Dell e520, Core2Quad, AMD HD 8570 (Oland - Southern Islands)
> graphics.
> 
> I ran into the same problem as katnatek, except that my machine wouldn't
> boot even with the radeon driver. I'm not surprised by this, as it would not
> boot any of the Mageia 8 kernels with anything but the amdgpu driver. In
> Mageia 8, sddm would fail. I suspect it could be the same here. 
> 

does kernel-linus won't boot even in console mode or just when switching to graphical mode? Does it work either with:

a) "modesetting" instead of "radeon" or "amdgpu" as device in xorg.conf

b) no /etc/X11/xorg.conf at all.

?

> TMB and I fought that battle some time ago, because the Live Mageia 8 Plasma
> test isos would not boot on this hardware. I don't remember ever trying
> kernel-linus on this hardware before, so I have no idea how long it's been
> since it may have worked with it. I have another set of hardware that won't
> work with kernel -linus because it needs one of our patches to make it work
> with the radeon driver and modern kernels - Foolishness, my Dell Inspiron
> 5100.
> 
> If our mainstream kernels won't work with the older hardware, we should try

Stock kernel-6.6.14-2.mga9 should work for you as in the past, as it has the patch reworked.

> to patch them so they do, but I agree with comment 10 that we don't need to
> patch kernel-linus for this old hardware.
> 
> Validating.
Comment 18 Thomas Andrews 2024-02-07 17:57:23 CET
The stock kernel does work with the amdgpu driver.

I am able to boot into run level 3 and log on with kernel-linus regardless of the assigned driver. I can't run startx with the amdgpu driver. It refuses, giving me a message that it is trying a modesetting driver, and that also fails. Switching to root, I used XFdrake to switch to the radeon driver, and rebooted again into run level 3. This time startx appears to work, showing the graphical representation of sddm starting, playing the music, but then ends up with a black screen containing only a movable mouse cursor. Using XFdrake to switch to the Xorg modesetting driver acts the same as the radeon driver.

I'm removing kernel-linus from this machine and getting on with my life.
Comment 19 Mageia Robot 2024-02-09 02:35:41 CET
An update for this issue has been pushed to the Mageia Updates repository.

https://advisories.mageia.org/MGASA-2024-0032.html

Resolution: (none) => FIXED
Status: NEW => RESOLVED

Comment 20 Morgan Leijström 2024-02-09 09:24:38 CET
This bug depend on Bug 32786.
How come this god pushed before that one?

No problem here - just asking about in cases when an update *must not* get pushed before another update, how to realise that?

Note You need to log in before you can comment on or make changes to this bug.