FEDORA-2023-ee241dcf80 — security update for kernel

stable

kernel-6.4.10-200.fc38

FEDORA-2023-ee241dcf80 created by jforbes a year ago for Fedora 38

The 6.4.10 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2023-ee241dcf80

This update has been submitted for testing by jforbes.

a year ago

This update's test gating status has been changed to 'waiting'.

a year ago

imabug provided feedback a year ago

karma

Test Case kernel regression

This update's test gating status has been changed to 'passed'.

a year ago

valdyn commented & provided feedback a year ago

karma

Works on Ryzon 5600X + RX 6700XT and Xeon W-2225 + FirePro W4100

Test Case kernel regression

g6avk commented & provided feedback a year ago

karma

Works for me, the enabled Default and Performance tests pass OK.

Work Station > Asus Prime mobo, Ryzen5 5600g/AMDGPU 400 Series Chipset, (UEFI + Secure Boot + TPM2) SSD's > RAID1 (ext4) , running Plasma DE from Zawertun's COPR.

Test Case kernel regression

bretth commented & provided feedback a year ago

karma

default & performance test pass (KVM)

Test Case kernel regression

geraldosimiao commented & provided feedback a year ago

karma

Working fine

Acer Aspire Intel® Core™ i7-3632QM CPU @ 2.20GHz Graphics Processor: Mesa DRI Intel® HD Graphics 4000.
driver: i915 v: kernel arch: Gen-7 wi-fi: Qualcomm Atheros AR9485 Wireless Network Adapter vendor: Lite-On
driver: ath9k v: kernel.

Default fedora btrfs filesystem.

Suspension working

Passed all kernel regression tests

Test Case kernel regression

nixuser commented & provided feedback a year ago

karma

Working here.

Intel NUC i7 NUC11PAH 1 x 11th Gen Intel(R) Core(TM) i7-1165G7 @ 2.80GHz Intel Corporation TigerLake-LP GT2 [Iris Xe Graphics] (rev 01)

ASUS G750JS 1 x Intel(R) Core(TM) i7-4700HQ CPU @ 2.40GHz Intel Corporation 4th Gen Core Processor Integrated Graphics Controller (rev 06) NVIDIA Corporation GK104M [GeForce GTX 870M] (rev a1)

Test Case kernel regression

This update has been pushed to testing.

a year ago

This update can be pushed to stable now if the maintainer wishes

a year ago

bojan commented & provided feedback a year ago

karma

Works.

roman-averin commented & provided feedback a year ago

karma

Error build VirtualBox net module

# cmd_check_local_export /tmp/vbox.0/VBoxNetFlt.o
  ./scripts/check-local-export /tmp/vbox.0/VBoxNetFlt.o
/tmp/vbox.0/linux/VBoxNetFlt-linux.c: In function ‘vboxNetFltLinuxForwardToIntNetInner’:
/tmp/vbox.0/linux/VBoxNetFlt-linux.c:1570:40: error: implicit declaration of function ‘skb_gso_segment’; did you mean ‘skb_gso_reset’? [-Werror=implicit-function-declaration]
 1570 |             struct sk_buff *pSegment = skb_gso_segment(pBuf, 0 /*supported features*/);
      |                                        ^~~~~~~~~~~~~~~
      |                                        skb_gso_reset
/tmp/vbox.0/linux/VBoxNetFlt-linux.c:1570:40: warning: initialization of ‘struct sk_buff *’ from ‘int’ makes pointer from integer without a cast [-Wint-conversion]
cc1: some warnings being treated as errors
make[2]: *** [scripts/Makefile.build:252: /tmp/vbox.0/linux/VBoxNetFlt-linux.o] Error 1
make[1]: *** [Makefile:2050: /tmp/vbox.0] Error 2
make: *** [/tmp/vbox.0/Makefile-footer.gmk:133: vboxnetflt] Error 2

robatino commented & provided feedback a year ago

Appears to be a VirtualBox bug, see https://www.virtualbox.org/ticket/21796 . Unusual since building VirtualBox modules usually fails due to merge window changes.

nixuser commented & provided feedback a year ago

@roman-averin This isn't a kernel issue. I reported this against the RPM Fusion version that I use here https://bugzilla.rpmfusion.org/show_bug.cgi?id=6741, and Sergio has already fixed it and it can be downloaded from https://koji.rpmfusion.org/koji/buildinfo?buildID=26534 (you just need to install akmod-VirtualBox-7.0.10-2.fc38.x86_64.rpm).

nixuser commented & provided feedback a year ago

Sorry, just to be clear, my comment above is only valid for people running the RPM Fusion version of VirtualBox.

roman-averin commented & provided feedback a year ago

Thanks, the patch works well.

r00t commented & provided feedback a year ago

karma

Ryzen 7 2700/ Radeon 5600XT works ok for me.

Test Case kernel regression

ibims commented & provided feedback a year ago

karma

Works on baremetal (non UEFI mode) AMD Ryzen5 3600, Mainboard MSI B450M Mortar Max with prop. nvidia driver (535.98) from rpmfusion.org (GTX980 card). Works with Gnome-Desktop (Xorg).

Test Case kernel regression

johnh99 commented & provided feedback a year ago

karma

Working OK here. Ryzen 3700x, Rog Strix B550-F, nvidia 2070 from rpmfusion.

Test Case kernel regression

markec provided feedback a year ago

karma

itrymybest80 provided feedback a year ago

karma

Test Case kernel regression

pampelmuse commented & provided feedback a year ago

karma

Works for me.

Test Case kernel regression

maxifed commented & provided feedback a year ago

karma

Works for me (AMD Ryzen 7600X + Radeon 6600XT)

pjolt commented & provided feedback a year ago

karma

HP 400 G6 Mini, i5-10400T, CometLake-S GT2 [UHD 630]

Test Case kernel regression

py0xc3 commented & provided feedback a year ago

karma

When booting 6.4.10, I cannot enter toolbox (toolbox enter). It did not add error output except that container "abc" failed. Unfortunately, I can currently not check if there are related log entries (maybe someone can verify if "toolbox enter" works for them?) -> the failed container is a default F38 container. Once booting with 6.4.9, it worked again.

Also, Netflix was very slow when I booted with 6.4.10 (the Netflix tab felt about as if all cores are at 100%, but everything outside the Netflix tab was fine). The video was correspondingly stuttering (the Internet & network connection was fine). Once booting with 6.4.9, it worked again.

I could only test it once with 6.4.10 (so I booted it only once), and there were some other updates that I have installed with 6.4.10 (the other updates are all from stable). However, there are no issues since rebooting to 6.4.9. I can neither verify at the moment if that was a one time thing nor get the logs. Maybe someone has time and can test both to check they get a comparable behavior? I will not be able to test much in the coming week.

Testing native on AMD 6850U Pro, x86_64. F38 KDE. Up to date as of today, only default repos. tainted=0.

When I can re-test and if I get the same behavior, I will write a bug report next week or the week after it.

wayne6001 commented & provided feedback a year ago

karma

Dell XPS 13 9350, Intel Core i7-6560U × 4, Mesa Intel Iris Graphics 540 (SKL GT3)
Two Intel NUC6i5SYK, Intel Core i5-6260U × 4, Mesa Intel Iris Graphics 540 (SKL GT3) (2 NUCs differ only in ssd size)

Default and Performance regression tests passed on both the laptop and on the NUC that was tested.

Working fine in normal use.

Test Case kernel regression

mharpau commented & provided feedback a year ago

karma

Works ok on Thinkpad X1 C9 / i7-1165G7

Test Case kernel regression

crcinau commented & provided feedback a year ago

karma

This release fixes a bug in ipv6 + vlans that has caused kernel panics since 6.3.8 onwards.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2221487

bittin commented & provided feedback a year ago

karma

Works fine on my Thinkpad Edge (2013) with Fedora 38

Test Case kernel regression

wtogami commented & provided feedback a year ago

karma

Working on Thinkpad (Ryzen 5850U apu)

This update has been submitted for stable by jforbes.

a year ago

masami commented & provided feedback a year ago

karma

i7-9700K(UHD Graphics 630): kernel regression test passed. Works fine for daily use.

Test Case kernel regression

grbs615 commented & provided feedback a year ago

karma

Working fine for me on POWER9 + Radeon 5450.

Test Case kernel regression

besser82 commented & provided feedback a year ago

karma

Works great! LGTM! =)

tharadash commented & provided feedback a year ago

karma

Seems to work fine on bare-metal HP Z440, AMD RX570 with UEFI. No issues to report so far and kernel regression tests both PASS.

Test Case kernel regression

py0xc3 commented & provided feedback a year ago

Concerning my comment above: "When booting 6.4.10, I cannot enter toolbox (toolbox enter). It did not add error output except that container "abc" failed. ..."

-> https://bugzilla.redhat.com/show_bug.cgi?id=2231744

This update has been pushed to stable.

a year ago

markec commented & provided feedback a year ago

Cool, @nixuser that works. Hopefully they'll push this to stable soon!

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

passed

Builds

kernel-6.4.10-200.fc38

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

approved

a year ago

BZ#2213802 CVE-2023-4155 kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability

BZ#2221609 CVE-2023-4273 kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry

BZ#2224594 kernel-6.4.4-100.fc37.x86_64 has no output on AMD RX570

BZ#2225511 CVE-2023-4128 Kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route

BZ#2229498 CVE-2023-4194 kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid

BZ#2229499 kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid [fedora-all]

BZ#2229642 CVE-2023-4155 kernel: KVM: SEV-ES / SEV-SNP VMGEXIT double fetch vulnerability [fedora-all]

BZ#2230448 kernel: exFAT: stack overflow in exfat_get_uniname_from_ext_entry [fedora-all]

BZ#2230905 CVE-2023-4128 kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route [fedora-all]

kernel-6.4.10-200.fc38

Automated Test Results

passed

Test Cases


0	17	Test Case kernel regression