FEDORA-2020-07f0be216f — security update for kernel

stable

kernel-5.6.16-300.fc32

FEDORA-2020-07f0be216f created by jforbes 2 years ago for Fedora 32

The 5.6.16 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2020-07f0be216f

This update has been submitted for testing by jforbes.

2 years ago

This update's test gating status has been changed to 'waiting'.

2 years ago

This update's test gating status has been changed to 'ignored'.

2 years ago

This update has been pushed to testing.

2 years ago

pwalter commented & provided feedback 2 years ago

karma

Works

ibims commented & provided feedback 2 years ago

karma

See nothing special, so it looks ok for me. Works on baremetal (non UEFI) AMD Ryzen5 3600, Mainboard MSI B450M Mortar Max with prop. nvidia driver from rpmfusion.org (GTX980 card) and Gnome-Desktop. Regression test passed (paxtest, selinux-dac-controls and libhugetlbfs skipped).

Test Case kernel regression

This update can be pushed to stable now if the maintainer wishes

2 years ago

bojan commented & provided feedback 2 years ago

karma

Works.

g6avk commented & provided feedback 2 years ago

karma

Works for me, The enabled Default and the Performance tests pass OK. AMD 965, x86_64 work station, SSD > RAID-1, Plasma DE, X-server, nVidia GTX 650 (GK107) + nVidia RPM's from Negativo17 (440.82)

Test Case kernel regression

mharpau commented & provided feedback 2 years ago

karma

It works on T480s,iGPU

Test Case kernel regression

This update has been submitted for stable by jforbes.

2 years ago

imabug provided feedback 2 years ago

karma

Test Case kernel regression

ersen provided feedback 2 years ago

karma

Test Case kernel regression

atim provided feedback 2 years ago

karma

Test Case kernel regression

itrymybest80 commented & provided feedback 2 years ago

karma

Default & performance regression tests PASS, "libhugetlbfs" & "paxtest" was skipped. Tested on Fedora 32 Workstation (x86_64), PRIME Z270-A, i5-7600K, 16GB DDR4, RX 580 8GB (MESA 20.0.7) & 970 EVO M.2, though it took me ~3 hours, just because of "bandwidth measurements" always stalling after 5.6.15.

Test Case kernel regression

alciregi commented & provided feedback 2 years ago

karma

WFM

Test Case kernel regression

amessina commented & provided feedback 2 years ago

Neutral karma as this kernel works on my systems with the exception of those clients using NFSv4.2/Kerberos which fail:

Linux version 5.6.16-300.fc32.x86_64 (mockbuild@bkernel03.phx2.fedoraproject.org) (gcc version 10.1.1 20200507 (Red Hat 10.1.1-1) (GCC)) #1 SMP Thu Jun 4 18:08:38 UTC 2020

...

------------[ cut here ]------------
virt_to_cache: Object is not a Slab page!
WARNING: CPU: 0 PID: 1660 at mm/slab.h:473 cache_from_obj+0xab/0xf0
Modules linked in: essiv authenc rfcomm rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip_set_hash_mac ip_set_hash_net nf_tables_set nf_tables macvlan ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep intel_rapl_msr mei_hdcp iTCO_wdt iTCO_vendor_support vfat fat intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm snd_soc_skl irqbypass intel_cstate intel_uncore intel_rapl_perf snd_hda_codec_hdmi snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_compress btusb
 ac97_bus btrtl snd_pcm_dmaengine wmi_bmof btbcm snd_hda_intel intel_wmi_thunderbolt btintel snd_intel_dspcfg snd_hda_codec bluetooth pcspkr snd_hda_core snd_hwdep snd_seq snd_seq_device ecdh_generic snd_pcm rfkill ecc i2c_i801 snd_timer snd soundcore mei_me mei intel_pch_thermal intel_xhci_usb_role_switch roles acpi_pad auth_rpcgss sunrpc loop tun ip_tables dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel e1000e ghash_clmulni_intel i2c_algo_bit cec drm_kms_helper uas drm usb_storage rtsx_pci wmi video fuse
CPU: 0 PID: 1660 Comm: kworker/u8:6 Not tainted 5.6.16-300.fc32.x86_64 #1
Hardware name:  /NUC7i7BNB, BIOS BNKBL357.86A.0082.2020.0505.1614 05/05/2020
Workqueue: rpciod rpc_async_schedule [sunrpc]
RIP: 0010:cache_from_obj+0xab/0xf0
Code: c3 31 c0 80 3d 8e d9 53 01 00 75 f0 48 c7 c6 20 6e 05 ba 48 c7 c7 00 ac 37 ba 48 89 04 24 c6 05 73 d9 53 01 01 e8 ac 74 e0 ff <0f> 0b 48 8b 04 24 eb ca 48 8b 57 58 48 8b 48 58 48 c7 c6 30 6e 05
RSP: 0018:ffffb63641917da8 EFLAGS: 00010296
RAX: 0000000000000029 RBX: ffff90d138454e00 RCX: 0000000000000007
RDX: 00000000fffffff8 RSI: 0000000000000096 RDI: ffff90d15ec19cc0
RBP: ffff90d138674800 R08: 000000000000044d R09: 0000000000000003
R10: 0000000000000000 R11: 0000000000000001 R12: ffff90d11b47a800
R13: ffff90d17aa28c2b R14: ffff90d138674cb0 R15: 0000000000000000
FS:  0000000000000000(0000) GS:ffff90d15ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0134291e36 CR3: 000000039b60a004 CR4: 00000000003606f0
Call Trace:
 kmem_cache_free+0x19/0x190
 xprt_release+0xae/0x1e0 [sunrpc]
 rpc_release_resources_task+0xe/0x40 [sunrpc]
 __rpc_execute+0x12f/0x3a0 [sunrpc]
 rpc_async_schedule+0x29/0x40 [sunrpc]
 process_one_work+0x1b4/0x380
 worker_thread+0x53/0x3e0
 ? process_one_work+0x380/0x380
 kthread+0x115/0x140
 ? __kthread_bind_mask+0x60/0x60
 ret_from_fork+0x35/0x40
---[ end trace dfdd0fb3534f2df2 ]---
general protection fault, probably for non-canonical address 0xaf37e50f0ed4dbe7: 0000 [#1] SMP PTI
CPU: 3 PID: 291 Comm: kworker/u8:3 Tainted: G        W         5.6.16-300.fc32.x86_64 #1
Hardware name:  /NUC7i7BNB, BIOS BNKBL357.86A.0082.2020.0505.1614 05/05/2020
Workqueue: rpciod rpc_async_schedule [sunrpc]
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb636402abd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f99121a8000 CR3: 000000039b60a006 CR4: 00000000003606e0
Call Trace:
 mempool_alloc+0x5b/0x150
 ? rpcauth_lookup_credcache+0x7f/0x320 [sunrpc]
 ? rpc_localaddr+0x300/0x300 [sunrpc]
 rpc_malloc+0x58/0xb0 [sunrpc]
 call_allocate+0xcb/0x1a0 [sunrpc]
 __rpc_execute+0x70/0x3a0 [sunrpc]
 rpc_async_schedule+0x29/0x40 [sunrpc]
 process_one_work+0x1b4/0x380
 worker_thread+0x53/0x3e0
 ? process_one_work+0x380/0x380
 kthread+0x115/0x140
 ? __kthread_bind_mask+0x60/0x60
 ret_from_fork+0x35/0x40
Modules linked in: essiv authenc rfcomm rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip_set_hash_mac ip_set_hash_net nf_tables_set nf_tables macvlan ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep intel_rapl_msr mei_hdcp iTCO_wdt iTCO_vendor_support vfat fat intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm snd_soc_skl irqbypass intel_cstate intel_uncore intel_rapl_perf snd_hda_codec_hdmi snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_compress btusb
 ac97_bus btrtl snd_pcm_dmaengine wmi_bmof btbcm snd_hda_intel intel_wmi_thunderbolt btintel snd_intel_dspcfg snd_hda_codec bluetooth pcspkr snd_hda_core snd_hwdep snd_seq snd_seq_device ecdh_generic snd_pcm rfkill ecc i2c_i801 snd_timer snd soundcore mei_me mei intel_pch_thermal intel_xhci_usb_role_switch roles acpi_pad auth_rpcgss sunrpc loop tun ip_tables dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel e1000e ghash_clmulni_intel i2c_algo_bit cec drm_kms_helper uas drm usb_storage rtsx_pci wmi video fuse
---[ end trace dfdd0fb3534f2df3 ]---
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb636402abd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f99121a8000 CR3: 000000039b60a006 CR4: 00000000003606e0
general protection fault, probably for non-canonical address 0x2000000000000: 0000 [#2] SMP PTI
CPU: 3 PID: 3083 Comm: postgres Tainted: G      D W         5.6.16-300.fc32.x86_64 #1
Hardware name:  /NUC7i7BNB, BIOS BNKBL357.86A.0082.2020.0505.1614 05/05/2020
RIP: 0010:lock_page_memcg+0x1a/0x80
Code: 0f 1f 44 00 00 31 d2 e9 e4 fd ff ff 0f 1f 40 00 0f 1f 44 00 00 41 54 55 53 0f 1f 44 00 00 48 89 fb 4c 8b 67 38 4d 85 e4 74 36 <41> 8b 84 24 00 05 00 00 85 c0 7e 2d 49 8d ac 24 b8 04 00 00 48 89
RSP: 0018:ffffb6364314bc68 EFLAGS: 00010206
RAX: ffffea651dc28c00 RBX: ffffea651dc28c00 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffea651dc28c00
RBP: ffffea651dc28c00 R08: ffff90d0c41f4640 R09: ffff90d15edab8d0
R10: 000000000000014c R11: 0000000000000003 R12: 0002000000000000
R13: 8000000770a30867 R14: 00007f0a7dfd0000 R15: 00007f0a7dfcf000
FS:  00007f0a91c18140(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0a94bee000 CR3: 00000007a7f30004 CR4: 00000000003606e0
Call Trace:
 page_remove_file_rmap+0x1b/0x1c0
 ? set_page_dirty+0xe/0xb0
 unmap_page_range+0x745/0xea0
 unmap_vmas+0x6a/0xd0
 exit_mmap+0x97/0x170
 mmput+0x61/0x140
 do_exit+0x2f3/0xae0
 ? handle_mm_fault+0xc0/0x1e0
 do_group_exit+0x33/0xa0
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0xf0
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7f0a93dfc431
Code: Bad RIP value.
RSP: 002b:00007ffe9802c598 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007f0a93ef3470 RCX: 00007f0a93dfc431
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: fffffffffffffef8 R09: 0000000000000000
R10: 00007f0a9394284e R11: 0000000000000246 R12: 00007f0a93ef3470
R13: 000000000000000c R14: 00007f0a93ef3948 R15: 0000000000000000
Modules linked in: essiv authenc rfcomm rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip_set_hash_mac ip_set_hash_net nf_tables_set nf_tables macvlan ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep intel_rapl_msr mei_hdcp iTCO_wdt iTCO_vendor_support vfat fat intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm snd_soc_skl irqbypass intel_cstate intel_uncore intel_rapl_perf snd_hda_codec_hdmi snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_compress btusb
 ac97_bus btrtl snd_pcm_dmaengine wmi_bmof btbcm snd_hda_intel intel_wmi_thunderbolt btintel snd_intel_dspcfg snd_hda_codec bluetooth pcspkr snd_hda_core snd_hwdep snd_seq snd_seq_device ecdh_generic snd_pcm rfkill ecc i2c_i801 snd_timer snd soundcore mei_me mei intel_pch_thermal intel_xhci_usb_role_switch roles acpi_pad auth_rpcgss sunrpc loop tun ip_tables dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel e1000e ghash_clmulni_intel i2c_algo_bit cec drm_kms_helper uas drm usb_storage rtsx_pci wmi video fuse
---[ end trace dfdd0fb3534f2df4 ]---
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb636402abd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  00007f0a91c18140(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f0a93dfc407 CR3: 00000007a7f30004 CR4: 00000000003606e0
Fixing recursive fault but reboot is needed!
general protection fault, probably for non-canonical address 0xaf37e50f0ed4dbe7: 0000 [#3] SMP PTI
CPU: 3 PID: 3400 Comm: kworker/u8:7 Tainted: G      D W         5.6.16-300.fc32.x86_64 #1
Hardware name:  /NUC7i7BNB, BIOS BNKBL357.86A.0082.2020.0505.1614 05/05/2020
Workqueue: rpciod rpc_async_schedule [sunrpc]
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0000:ffffb63641c6bd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f62df4dd6e0 CR3: 00000007a88d2004 CR4: 00000000003606e0
Call Trace:
 mempool_alloc+0x5b/0x150
 ? rpcauth_lookup_credcache+0x7f/0x320 [sunrpc]
 ? kmem_cache_alloc_trace+0x167/0x220
 ? rpc_localaddr+0x300/0x300 [sunrpc]
 rpc_malloc+0x58/0xb0 [sunrpc]
 call_allocate+0xcb/0x1a0 [sunrpc]
 __rpc_execute+0x70/0x3a0 [sunrpc]
 rpc_async_schedule+0x29/0x40 [sunrpc]
 process_one_work+0x1b4/0x380
 worker_thread+0x53/0x3e0
 ? process_one_work+0x380/0x380
 kthread+0x115/0x140
 ? __kthread_bind_mask+0x60/0x60
 ret_from_fork+0x35/0x40
Modules linked in: essiv authenc rfcomm rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip_set_hash_mac ip_set_hash_net nf_tables_set nf_tables macvlan ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep intel_rapl_msr mei_hdcp iTCO_wdt iTCO_vendor_support vfat fat intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm snd_soc_skl irqbypass intel_cstate intel_uncore intel_rapl_perf snd_hda_codec_hdmi snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_compress btusb
 ac97_bus btrtl snd_pcm_dmaengine wmi_bmof btbcm snd_hda_intel intel_wmi_thunderbolt btintel snd_intel_dspcfg snd_hda_codec bluetooth pcspkr snd_hda_core snd_hwdep snd_seq snd_seq_device ecdh_generic snd_pcm rfkill ecc i2c_i801 snd_timer snd soundcore mei_me mei intel_pch_thermal intel_xhci_usb_role_switch roles acpi_pad auth_rpcgss sunrpc loop tun ip_tables dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel e1000e ghash_clmulni_intel i2c_algo_bit cec drm_kms_helper uas drm usb_storage rtsx_pci wmi video fuse
---[ end trace dfdd0fb3534f2df5 ]---
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb636402abd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f62df4dd6e0 CR3: 00000007a88d2004 CR4: 00000000003606e0
BUG: unable to handle page fault for address: 000000000002a240
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0 
Oops: 0000 [#4] SMP PTI
CPU: 0 PID: 2840 Comm: korgac Tainted: G      D W         5.6.16-300.fc32.x86_64 #1
Hardware name:  /NUC7i7BNB, BIOS BNKBL357.86A.0082.2020.0505.1614 05/05/2020
RIP: 0010:__dec_node_page_state+0x1b/0x70
Code: 41 5c e9 b8 64 e8 ff 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 8b 07 89 f6 48 c1 e8 36 4c 8b 04 c5 a0 94 84 ba b8 ff ff ff ff <49> 8b 88 40 a2 02 00 48 8d 54 31 01 65 0f c0 02 83 e8 01 65 40 8a
RSP: 0018:ffffb63641e0bc88 EFLAGS: 00010202
RAX: 00000000ffffffff RBX: ffff90d131cdd1f0 RCX: 0000000000000000
RDX: 0000000000000000 RSI: 000000000000000e RDI: ffffea651dc29380
RBP: ffffea651dc29380 R08: 0000000000000000 R09: 0000000000000001
R10: 000000000087f000 R11: 0000000000000000 R12: ffffb63641e0bdf0
R13: 8000000770a4e867 R14: 000055656943f000 R15: 000055656943e000
FS:  0000000000000000(0000) GS:ffff90d15ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000000002a240 CR3: 000000039b60a003 CR4: 00000000003606f0
Call Trace:
 page_remove_rmap.part.0+0x1b/0x70
 unmap_page_range+0x745/0xea0
 unmap_vmas+0x6a/0xd0
 exit_mmap+0x97/0x170
 mmput+0x61/0x140
 do_exit+0x2f3/0xae0
 ? handle_mm_fault+0xc0/0x1e0
 do_group_exit+0x33/0xa0
 __x64_sys_exit_group+0x14/0x20
 do_syscall_64+0x5b/0xf0
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x7fc9a9070431
Code: Bad RIP value.
RSP: 002b:00007ffc2b036288 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
RAX: ffffffffffffffda RBX: 00007fc9a9167470 RCX: 00007fc9a9070431
RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffffffffffffff40 R09: 0000000000000000
R10: 00007fc9a916f84e R11: 0000000000000246 R12: 00007fc9a9167470
R13: 00000000000001de R14: 00007fc9a9167948 R15: 0000000000000000
Modules linked in: essiv authenc rfcomm rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip_set_hash_mac ip_set_hash_net nf_tables_set nf_tables macvlan ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep intel_rapl_msr mei_hdcp iTCO_wdt iTCO_vendor_support vfat fat intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm snd_soc_skl irqbypass intel_cstate intel_uncore intel_rapl_perf snd_hda_codec_hdmi snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_compress btusb
 ac97_bus btrtl snd_pcm_dmaengine wmi_bmof btbcm snd_hda_intel intel_wmi_thunderbolt btintel snd_intel_dspcfg snd_hda_codec bluetooth pcspkr snd_hda_core snd_hwdep snd_seq snd_seq_device ecdh_generic snd_pcm rfkill ecc i2c_i801 snd_timer snd soundcore mei_me mei intel_pch_thermal intel_xhci_usb_role_switch roles acpi_pad auth_rpcgss sunrpc loop tun ip_tables dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel e1000e ghash_clmulni_intel i2c_algo_bit cec drm_kms_helper uas drm usb_storage rtsx_pci wmi video fuse
CR2: 000000000002a240
---[ end trace dfdd0fb3534f2df6 ]---
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb636402abd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ec00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fc9a9070407 CR3: 000000039b60a003 CR4: 00000000003606f0
Fixing recursive fault but reboot is needed!
general protection fault, probably for non-canonical address 0xaf37e50f0ed4dbe7: 0000 [#5] SMP PTI
CPU: 3 PID: 976 Comm: kworker/u8:5 Tainted: G      D W         5.6.16-300.fc32.x86_64 #1
Hardware name:  /NUC7i7BNB, BIOS BNKBL357.86A.0082.2020.0505.1614 05/05/2020
Workqueue: rpciod rpc_async_schedule [sunrpc]
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb63640363d38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fac8112a010 CR3: 0000000858734002 CR4: 00000000003606e0
Call Trace:
 mempool_alloc+0x5b/0x150
 ? rpcauth_lookup_credcache+0x7f/0x320 [sunrpc]
 ? kmem_cache_alloc_trace+0x167/0x220
 ? rpc_localaddr+0x300/0x300 [sunrpc]
 rpc_malloc+0x58/0xb0 [sunrpc]
 call_allocate+0xcb/0x1a0 [sunrpc]
 __rpc_execute+0x70/0x3a0 [sunrpc]
 rpc_async_schedule+0x29/0x40 [sunrpc]
 process_one_work+0x1b4/0x380
 worker_thread+0x53/0x3e0
 ? process_one_work+0x380/0x380
 kthread+0x115/0x140
 ? __kthread_bind_mask+0x60/0x60
 ret_from_fork+0x35/0x40
Modules linked in: essiv authenc rfcomm rpcsec_gss_krb5 nfsv4 dns_resolver nfs lockd grace fscache nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat ip_set_hash_mac ip_set_hash_net nf_tables_set nf_tables macvlan ebtable_nat ebtable_broute ip6table_nat ip6table_mangle ip6table_raw ip6table_security iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security ip_set nfnetlink ebtable_filter ebtables ip6table_filter ip6_tables iptable_filter cmac bnep intel_rapl_msr mei_hdcp iTCO_wdt iTCO_vendor_support vfat fat intel_rapl_common x86_pkg_temp_thermal intel_powerclamp coretemp kvm_intel kvm snd_soc_skl irqbypass intel_cstate intel_uncore intel_rapl_perf snd_hda_codec_hdmi snd_soc_sst_ipc snd_soc_sst_dsp snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_hda_codec_realtek snd_hda_codec_generic ledtrig_audio snd_compress btusb
 ac97_bus btrtl snd_pcm_dmaengine wmi_bmof btbcm snd_hda_intel intel_wmi_thunderbolt btintel snd_intel_dspcfg snd_hda_codec bluetooth pcspkr snd_hda_core snd_hwdep snd_seq snd_seq_device ecdh_generic snd_pcm rfkill ecc i2c_i801 snd_timer snd soundcore mei_me mei intel_pch_thermal intel_xhci_usb_role_switch roles acpi_pad auth_rpcgss sunrpc loop tun ip_tables dm_crypt i915 rtsx_pci_sdmmc mmc_core crct10dif_pclmul crc32_pclmul crc32c_intel e1000e ghash_clmulni_intel i2c_algo_bit cec drm_kms_helper uas drm usb_storage rtsx_pci wmi video fuse
---[ end trace dfdd0fb3534f2df7 ]---
RIP: 0010:kmem_cache_alloc+0x73/0x220
Code: a7 01 00 00 4d 8b 06 65 49 8b 50 08 65 4c 03 05 3b ab d3 46 4d 8b 20 4d 85 e4 0f 84 93 01 00 00 41 8b 46 20 49 8b 3e 4c 01 e0 <48> 8b 18 48 89 c1 49 33 9e 70 01 00 00 48 0f c9 48 31 cb 40 f6 c7
RSP: 0018:ffffb636402abd38 EFLAGS: 00010286
RAX: af37e50f0ed4dbe7 RBX: 0000000000000000 RCX: 0000000000000002
RDX: 0000000000000041 RSI: 0000000000092800 RDI: 0000000000032ed0
RBP: 0000000000092800 R08: ffff90d15edb2ed0 R09: ffffffffc1040f0d
R10: 0000000000000018 R11: 0000000000000018 R12: af37e50f0ed4dbe7
R13: ffffffffb925508b R14: ffff90d15ad93340 R15: ffff90d15ad93340
FS:  0000000000000000(0000) GS:ffff90d15ed80000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fac8112a010 CR3: 0000000858734002 CR4: 00000000003606e0

huembert provided feedback 2 years ago

karma

Test Case kernel regression

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata

Type

security

Severity

high

Karma

Signed

Content Type

RPM

Test Gating

Builds

kernel-5.6.16-300.fc32

Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

2 years ago

in testing

2 years ago

in stable

2 years ago

BZ#1842525 CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap

BZ#1843883 CVE-2020-10757 kernel: kernel: DAX hugepages not considered during mremap [fedora-all]

kernel-5.6.16-300.fc32

Automated Test Results

Test Cases


0	9	Test Case kernel regression