FEDORA-2016-c654464bce created by labbott 4 years ago for Fedora 24
obsolete

This is a rebase to the 4.7.2 kernel. The 4.7.2 update contains a number of important fixes across the tree.

Reboot Required
After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

This update has been submitted for testing by labbott.

4 years ago
User Icon fszymanski commented & provided feedback 4 years ago
karma

Works for me.

User Icon dirkk commented & provided feedback 4 years ago
karma

Generally seems to work, but a message concerning "disabled kaslr" right after grub appears, as in https://bugzilla.redhat.com/show_bug.cgi?id=1350174

works for me - BUT https://bugzilla.redhat.com/show_bug.cgi?id=1369489 takes some time to figure out and i am still unable to find some better solution then blindly open port ranges for ftp-like services - google for the warning messages in syslog brings NOTHING useful over years besides others asking what it means

labbott edited this update.

4 years ago
User Icon dhgutteridge commented & provided feedback 4 years ago
karma

No regressions noted on x86_64 Ivy Bridge and i686 Diamondville. (I do see the "disabled kaslr" warning others have noted.)

User Icon bradw commented & provided feedback 4 years ago
karma

Personal LAMP and mail server running GNOME. All OK.

User Icon anonymous commented & provided feedback 4 years ago

Works for me.

But kernel regression test reported:

$ sudo ./runtests.sh Test suite called with default ./default/modsign SKIP
./default/libhugetlbfs SKIP
./default/paxtest SKIP
./default/mq-memory-corruption PASS
./default/sysfs-perms FAIL
./default/memfd PASS
./default/insert_leap_second PASS
./default/posix_timers PASS
./default/cachedrop PASS
./default/stack-randomness PASS
./default/selinux-dac-controls SKIP
./default/timer-overhead PASS

Test suite complete FAIL

$ sudo ./runtest.sh Found world-writable files in sysfs. /sys/kernel/debug/btrfs/test

karma: +1

User Icon jorti commented & provided feedback 4 years ago
karma

I've been using it on my workstation for a couple of days without problem. My hardware is Intel SandyBridge on Asus P8Z68-V LE.

User Icon mildew commented & provided feedback 4 years ago
karma

"KASLR disabled" warning on boot but otherwise works fine for me.

This update has been pushed to testing.

4 years ago
User Icon suraia provided feedback 4 years ago
karma
User Icon dandim commented & provided feedback 4 years ago
karma

Works

User Icon jbwillia commented & provided feedback 4 years ago
karma

wfm i am seeing the kastr warning both test for regressions fail sudo ./runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop FAIL
./default/memfd PASS
./default/selinux-dac-controls PASS

Test suite complete FAIL

Your log file is being submitted Upload successful! [jbwillia@localhost kernel-tests]$ sudo ./runtests.sh performance Test suite called with default ./default/libhugetlbfs SKIP
./default/posix_timers PASS
./default/paxtest PASS
./default/modsign SKIP
./default/sysfs-perms PASS
./default/mq-memory-corruption PASS
./default/insert_leap_second PASS
./default/timer-overhead PASS
./default/stack-randomness PASS
./default/cachedrop FAIL
./default/memfd PASS
./default/selinux-dac-controls PASS

Test suite complete FAIL

Your log file is being submitted Upload successful!

fpaste --sysinfo https://paste.fedoraproject.org/413625/47208301

User Icon funfunctor commented & provided feedback 4 years ago
karma

+1 as this is critically needed for the amdgpu any support for Radeon/Polaris ASIC's.

N.B., It would be nice to have KASLR enabled for added security however i can understand that may perturb someone perhaps (new scary kernel feature). So if its held off for one update cycle I can appreciate that.

BZ#1367092 kernel: Use after free in tcp_xmit_retransmit_queue [fedora-all]
BZ#1367091 CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue
User Icon labbott commented & provided feedback 4 years ago

CONFIG_RANDOMIZE_BASE is enabled, it just gets turned off due to hibernation. kaslr and hibernation are mutually exclusive so if you are okay with turning off hibernation you can turn on kaslr by adding kaslr on the kernel command line.

User Icon devhen commented & provided feedback 4 years ago
karma

With this kernel I have a strange SELinux denial related to bash but everything seems to be working normally, as far as I can tell.

SELinux denial: https://paste.fedoraproject.org/413660/72101153/

In regards to the kernel regression tests: my ThinkPad T440s fails the "sysfs-perms" test but it has been that way for as long as I've been running the regression tests on this machine.

Failed regression test: https://apps.fedoraproject.org/kerneltest/logs/9848

User Icon yuwata commented & provided feedback 4 years ago
karma

works for me

User Icon cserpentis commented & provided feedback 4 years ago
karma

works for me

User Icon dimitrisk commented & provided feedback 4 years ago
karma

WFM Thinkpad X250

User Icon bojan commented & provided feedback 4 years ago
karma

Kernel panic on my x86_64 Atom based server. Will open a bug.

User Icon bojan commented & provided feedback 4 years ago
karma

Bug #1370061.

User Icon hhlp commented & provided feedback 4 years ago
karma

Look Good to Me, pass default, minimal stress an performance test

User Icon anonymous commented & provided feedback 4 years ago

WFM

karma: +1

User Icon freddyw commented & provided feedback 4 years ago
karma

No regressions noted, Haswell CPU.

User Icon lupinix commented & provided feedback 4 years ago
karma

works fine on ThinkPad T450s

User Icon adamwill commented & provided feedback 4 years ago
karma

seems fine on third-gen xps13 dev edition

User Icon em3rson commented & provided feedback 4 years ago
karma

works

User Icon greg18 commented & provided feedback 4 years ago
karma

i get this Bug, like many others do, otherwise it works fine

"KASLR disabled" warning on boot but otherwise works fine for me.

User Icon samoht0 commented & provided feedback 4 years ago
karma

Works for me (AMD E-450 APU, x86_64).

KASLR warning looks self-explaining to me. But thanks Laura for noting the details.

User Icon hifi commented & provided feedback 4 years ago
karma

Works for me, Skylake system.

User Icon hhlp commented & provided feedback 4 years ago

I've got a message concerning "disabled kaslr"

User Icon bojan commented & provided feedback 4 years ago
karma

Also problems on an i686 VM. See bug #1370795.

User Icon tdlrali commented & provided feedback 4 years ago
karma

I don't think this should get pushed to stable due to the KASLR issue: https://bugzilla.redhat.com/show_bug.cgi?id=1350174

User Icon samoht0 commented & provided feedback 4 years ago

@tdlrali

Did you read the comments here? I don't think so. Please look here:

https://bodhi.fedoraproject.org/updates/kernel-4.7.2-200.fc24#comment-476489

You may disable hibernation at kernel command line and the "issue" should be fixed.

User Icon tdlrali commented & provided feedback 4 years ago

The way i understand, every user that updates their kernel after this gets pushed to stable and has hibernation turned on (which is on by default, i think?) will suddenly get a very prominent new warning message on boot. Won't that cause a lot of unnecessary confusion?

User Icon hreindl commented & provided feedback 4 years ago

@tdlrali are you kidding? very prominent?

some random message in th ebootlog is not "very prominent" since most people have graphical boot turned on and don't face any kernel messages at all an dthe ones who care and removbe "rhgb" and "quiet" are expected to come with basic technical understanding

User Icon tdlrali commented & provided feedback 4 years ago

I'm not exactly sure why, but I see the KASLR message (and only this message, a single line at the top of the screen) during boot even though I have rhgb and quiet enabled:

cat /proc/cmdline:

BOOT_IMAGE=/vmlinuz-4.7.2-200.fc24.x86_64 [...] rhgb quiet radeon.modeset=1 LANG=en_US.UTF-8

That's why I wrote "prominent". But maybe this is a local issue?

User Icon samoht0 commented & provided feedback 4 years ago

Even if the message is (shortly) visible with rhgb (did not check), it clearly says, that this is due to activated hibernation.

Those who don't need hibernation may add nohibernate to command line via /etc/default/grub (GRUB_CMDLINE_LINUX) and use grub2-mkconfig to recreate grub.cfg.

User Icon gbcox commented & provided feedback 4 years ago
karma

Works for me

User Icon fredlima commented & provided feedback 4 years ago
karma

Works for me

User Icon funfunctor commented & provided feedback 4 years ago

@tdlrali - one other thing is that while that message on KASLR is mildly annoying this update is critically required for people with AMD Radeon Polaris hardware to get support. Further it fixes a few important security issues also.

User Icon samoht0 commented & provided feedback 4 years ago

Just for the record:

I configured KASLR on my desktop system. Only "nohibernate" don't work, "kaslr" must be present in kernel cmd line. KASLR works without issues so far.

User Icon pwalter commented & provided feedback 4 years ago
karma

Works

User Icon mhayden commented & provided feedback 4 years ago
karma

Works for me!.

User Icon jbwillia commented & provided feedback 4 years ago
karma

2nd machine https://paste.fedoraproject.org/416886/14724768

sudo ./runtests.sh [sudo] password for jbwillia: Test suite called with default ./default/sysfs-perms PASS ./default/libhugetlbfs SKIP ./default/modsign SKIP ./default/selinux-dac-controls SKIP ./default/cachedrop PASS ./default/posix_timers PASS ./default/timer-overhead PASS ./default/mq-memory-corruption PASS ./default/insert_leap_second PASS ./default/memfd PASS ./default/stack-randomness PASS ./default/paxtest SKIP Test suite complete PASS Your log file is being submitted Traceback (most recent call last): File "./fedora_submit.py", line 6, in --RAW HTML NOT ALLOWED-- from fedora.client import OpenIdBaseClient ImportError: No module named fedora.client [jbwillia@noname kernel-tests]$ sudo ./runtests.sh -t performance Test suite called with performance Using config in CONFIG.noname.math.vt.edu Mon Aug 29 09:23:25 EDT 2016 Latency measurements Mon Aug 29 09:27:06 EDT 2016 Calculating file system latency Mon Aug 29 09:27:08 EDT 2016 Local networking Mon Aug 29 09:28:52 EDT 2016 Bandwidth measurements Mon Aug 29 09:48:40 EDT 2016 Calculating context switch overhead Mon Aug 29 09:48:43 EDT 2016 Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 342, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 354, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 357, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $ in pattern match (m//) at ../scripts/getsummary line 360, --RAW HTML NOT ALLOWED-- line 136. Use of uninitialized value $_ in pattern match (m//) at ../scripts/getsummary line 382, --RAW HTML NOT ALLOWED-- line 136. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 777. Argument "" isn't numeric in numeric gt (>) at ../scripts/getsummary line 944, --RAW HTML NOT ALLOWED-- line 777. ./performance/lmbench3 PASS Test suite complete PASS Your log file is being submitted

This update has been obsoleted by kernel-4.7.2-201.fc24.

4 years ago
User Icon anonymous commented & provided feedback 4 years ago

i have a problem whit this kernel, i can't log in after update I see a screen saying error log out. help


Please login to add feedback.

Metadata
Type
security
Karma
24
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
4 years ago
in testing
4 years ago
modified
4 years ago
BZ#1353558 Starting docker.service produces SELinux error op=security_compute_av perms=siginh
0
0
BZ#1367091 CVE-2016-6828 kernel: Use after free in tcp_xmit_retransmit_queue
0
0
BZ#1367092 kernel: Use after free in tcp_xmit_retransmit_queue [fedora-all]
0
0

Automated Test Results

Test Cases

-1 5 Test Case kernel regression