FEDORA-2016-2e5ebfed6d

security update in Fedora 24 for kernel

Status: stable 3 years ago

The -201 build is an incremental build. it contains several fixes for known bugzillas and one fix for a known oom regression.


This is a rebase to the 4.7.2 kernel. The 4.7.2 update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --advisory=FEDORA-2016-2e5ebfed6d

Comments 38

This update has been submitted for testing by labbott.

This update has obsoleted kernel-4.7.2-200.fc24, and has inherited its bugs and notes.

Seems fine on a couple of VMs and a number of different ARMv7 and aarch64 devices

karma: +1 critpath: +1 #1365940: +1 kernel regression: +1

Works for me.

karma: +1 critpath: +1 kernel regression: +1

Personal LAMP and mail server running GNOME. All OK.

karma: +1

No regressions noted on x86_64 Ivy Bridge and i686 Diamondville.

karma: +1 critpath: +1

Fixes polaris10 support to work out the box.

karma: +1 critpath: +1 #1370061: +1 #1353558: +1 #1367092: +1 #1367091: +1

works for me

karma: +1

works fine on ppc64(le)

karma: +1 #1365940: +1

This update has been pushed to testing.

Works for me

karma: +1

Works for me. LAMP stack + Plex

karma: +1 critpath: +1

wfm sudo ./runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop PASS
./default/memfd PASS
./default/selinux-dac-controls PASS

Test suite complete PASS

Your log file is being submitted Upload successful! [jbwillia@localhost kernel-tests]$ sudo ./runtests.sh performance Test suite called with default ./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop PASS
./default/memfd PASS
./default/selinux-dac-controls PASS

Test suite complete PASS

https://paste.fedoraproject.org/418612/14726811

karma: +1 critpath: +1

forgot to mark the kernel regression

This kernel breaks akmod-wl on my desktop machine.

karma: -1 critpath: -1

works for me

karma: +1

works for me

karma: +1

Works on x86_64 server running squid in TPROXY mode. Works on ThinkPad T450s (x86_64). Works on an i686 VM, but I did switch the SCSI adapter from LSI (mptbase) to PVSCSI (vmw_pvscsi) with the assistance of ESX admins. Now, I won't claim 100% that this is what made a difference on this i686 VM, but I do see changes to mptbase driver in 4.7 that are not in 4.6, so a tentative "maybe". Or it was maybe just a dumb luck that it booted on first try...

karma: +1 critpath: +1 #1370061: +1

Works on Dell R520 Xeon E5-2430.

karma: +1 critpath: +1

Works for me

karma: +1 critpath: +1 #1370061: +1 kernel regression: +1

@ urbenlegend: nobody cares for akmod here since it's NOT part of fedora and breakage for 3rd party kernel modules is expected when the minor version changes - so just wait for it to become stable and complain at rpmfusion if they don't manage their akmods timely (or just take care when buy hardware)

No regressions noted (AMD E-450 APU x86_64).

karma: +1

Works well on my ThinkPad T460s laptop with external monitors and docking station.

karma: +1 critpath: +1

works fine on a Thinkpad X1 2014

karma: +1

This update has been submitted for stable by labbott.

wfm https://paste.fedoraproject.org/419009/14727472 runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/sysfs-perms PASS ./default/libhugetlbfs SKIP ./default/modsign SKIP ./default/selinux-dac-controls SKIP ./default/cachedrop PASS ./default/posix_timers PASS ./default/timer-overhead PASS ./default/mq-memory-corruption PASS ./default/insert_leap_second PASS ./default/memfd PASS ./default/stack-randomness PASS ./default/paxtest SKIP

Test suite complete PASS

Thu Sep 1 12:29:11 EDT 2016 Latency measurements Thu Sep 1 12:32:49 EDT 2016 Calculating file system latency Thu Sep 1 12:32:51 EDT 2016 Local networking Thu Sep 1 12:34:41 EDT 2016 Bandwidth measurements Thu Sep 1 12:55:18 EDT 2016 Calculating context switch overhead Thu Sep 1 12:55:22 EDT 2016 Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 342, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 354, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 357, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 360, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $_ in pattern match (m//) at ../scripts/getsummary line 382, --RAW HTML NOT ALLOWED-- line 136. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 1622. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 1622. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 1622. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 1622. ./performance/lmbench3 PASS

Test suite complete PASS

karma: +1 critpath: +1 kernel regression: +1

works for me.

karma: +1 critpath: +1

This update has been pushed to stable.

On my fedora core 24(64 bit), I upgraded to this kernel(4.7.2-201) from 4.6.7-300 and now the broadcom bcm4312 wifi module is not working on my Lenovo laptop. Earlier, it was working after doing "modprobe wl". Now it says "modprobe: FATAL: Module wl not found in directory /lib/modules/4.7.2-201.fc24.x86_64"

@anonymous, you just need to get the updated akmod-wl package from rpmfusion. They just released it yesterday. Boot into an older kernel, do the update, then boot into newer kernel, do sudo akmods --force, and then reboot again.

This kernel completely bricks my system. The moment I boots, it just freezes.

karma: -1

critpath: -1

"The moment I boots, it just freezes" is a worthless information - what is on the screen when it freezes - have you disabled "quiet" and "rhgb" to see what it says?

WHAT harwdare? some crap involved which needs out-of-tree kernel modules?

Nothing is on the screen. It goes into complete brick mode. Nothing is happening, nothing shows up, no TTYs, no indication of anything.

,,|,,

Samsung NP520U4C-A01UB Processor CPU Intel® Core™ i5-3210M Processor System Memory 8GB Memory Type DDR3 (1600MHz) Chipset Intel® HD Graphics 4000

karma: -1

critpath: -1

This bug isn't related to your problem (newer cpu gen), but do you mean such behavior as no boot/kernel output at all?

https://bugzilla.redhat.com/show_bug.cgi?id=1353103

If so, a very early operation fails. Here are some options to debug these situations ("If You Get No Shell"):

https://freedesktop.org/wiki/Software/systemd/Debugging/

You may also check, if it's a matter of updated linux-firmware by downloading/installing an older version and recreating initrd:

https://bodhi.fedoraproject.org/updates/?packages=linux-firmware (linux-firmware-packages)

dracut -f --kver 4.7.2-201.fc24.x86_64 (recreate initrd for 4.7.2-201)

I should have left this testing report earlier, it worked for me on corei5,hp paviliong g6. no issue till date with the various tools and hardward I use. Bee run testing for 4days now.

Works for Lenovo Z50-70 and lenovo x220 . Everything works fine

karma: +1 critpath: +1

This update causes Dell XPS-13 laptop to oscillate brightness level continuously between 100% and whatever it's set to. The oscillation frequency is about once per second. The previous kernel (4.6.7-300) doesn't have this problem.

On Maxdata with Quad core Intel Core i7-3612QM CPU and Intel HD Graphics 4000 it sets brightness level to maximum. By pressing Fn-F8 or Fn-F9 i can move brightness indicator, but not the brightness itself.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
security
Update Severity
unspecified
Karma
+18
stable threshold: 3
unstable threshold: -3
Autopush (karma)
Disabled
Autopush (time)
Disabled
Dates
submitted 3 years ago
in testing 3 years ago
in stable 3 years ago

Related Bugs 7

0+1 #1353558 Starting docker.service produces SELinux error op=security_compute_av perms=siginh
00 #1362466 CVE-2016-6480 kernel: scsi: aacraid: double fetch in ioctl_send_fib()
00 #1362467 CVE-2016-6480 kernel: scsi: aacraid: double fetch in ioctl_send_fib() [fedora-all]
0+2 #1365940 [ruby] Problem to send empty UDP packet
0+1 #1367091 CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue
0+1 #1367092 kernel: Use after free in tcp_xmit_retransmit_queue [fedora-all]
0+3 #1370061 Kernel 4.7.2-200 panics after boot

Automated Test Results

Test Cases

0+4 Test Case kernel regression