FEDORA-2019-640f8d8dd1 — security update for kernel and kernel-headers

stable

kernel-5.0.16-300.fc30 and kernel-headers-5.0.16-300.fc30

FEDORA-2019-640f8d8dd1 created by jforbes 5 years ago for Fedora 30

The 5.0.16 stable updates contain a number of important fixes across the tree. Most importantly, these updates address the kernel portion of the MDS CVEs.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-640f8d8dd1

This update has been submitted for testing by jforbes.

5 years ago

This update has been pushed to testing.

5 years ago

anonymous commented & provided feedback 5 years ago

Updated manually (mirrors seem not to have the update yet) and rebooted my Fedora 30 x86_64 laptop. It all looks fine, even using akmod-nvidia from rpm-fusion.

markec commented & provided feedback 5 years ago

karma

Looks good on a VirtualBox VM

markec commented & provided feedback 5 years ago

karma

Looks good on a VirtualBox VM

micmor commented & provided feedback 5 years ago

karma

No problem.

Test Case kernel regression

micmor commented & provided feedback 5 years ago

karma

No problem.

Test Case kernel regression

kparal commented & provided feedback 5 years ago

karma

Everything seems to work fine. ThinkPad T480s.

Test Case kernel regression

This update has been submitted for stable by bodhi.

5 years ago

lruzicka commented & provided feedback 5 years ago

karma

For me, everything seems ok. I also did the regression tests, they passed except for modsign and libhugetlfbs that were skipped. Tested on a VM.

Test Case kernel regression

lruzicka commented & provided feedback 5 years ago

karma

For me, everything seems ok. I also did the regression tests, they passed except for modsign and libhugetlfbs that were skipped. Tested on a VM.

Test Case kernel regression

lruzicka commented & provided feedback 5 years ago

karma

For me, everything seems ok. I also did the regression tests, they passed except for modsign and libhugetlfbs that were skipped. Tested on a VM.

Test Case kernel regression

imabug provided feedback 5 years ago

karma

Test Case kernel regression

This update has been pushed to stable.

5 years ago

ibims commented & provided feedback 5 years ago

karma

works for me on Intel i5-3550 and Intel i5-3470 with prop. nvidia-driver from rpmfusion nd VirtualBox 6.0.8 from Oracle. @kernel-team: Thank you for the very fast reaction.

Test Case kernel regression

bjr69 commented & provided feedback 5 years ago

This update causes my bluetooth keyboard to fail connection. 5.0.14-300 works fine, this just doesn't. It's hard to get debug information when connection is not possible.

mch commented & provided feedback 5 years ago

Same exact issue as bjr with a bluetooth mouse. GNOME Bluetooth tray icon flashes on and off rapidly as the connection fails.

grigorig commented & provided feedback 5 years ago

The bluetooth problems appear to be a common issue. There's a thread on reddit with some more info:

https://www.reddit.com/r/Fedora/comments/bp6ddq/my_bluetooth_isnt_working_in_kernel_5016/

grigorig commented & provided feedback 5 years ago

Upstream bug report:

https://bugzilla.kernel.org/show_bug.cgi?id=203643

Please login to add feedback.

Metadata

Type

security

Severity

urgent

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

Builds

kernel-5.0.16-300.fc30

kernel-headers-5.0.16-300.fc30

BZ#1646781 CVE-2018-12126 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)

BZ#1646784 CVE-2018-12130 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)

BZ#1667782 CVE-2018-12127 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)

BZ#1705312 CVE-2019-11091 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

BZ#1709837 CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command

BZ#1709838 CVE-2019-11884 kernel: sensitive information disclosure from kernel stack memory via HIDPCONNADD command [fedora-all]

BZ#1709976 CVE-2018-12126 kernel: hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) [fedora-all]

BZ#1709978 CVE-2018-12127 kernel: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [fedora-all]

BZ#1709983 CVE-2019-11091 kernel: hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) [fedora-all]

BZ#1709989 CVE-2018-12130 kernel: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [fedora-all]

BZ#1709996 CVE-2018-12130 kernel: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [fedora-all]

kernel-5.0.16-300.fc30

kernel-headers-5.0.16-300.fc30

Automated Test Results

ignored

Test Cases


0	5	Test Case kernel regression