FEDORA-2021-2306e89112 — security update for kernel, kernel-headers, & 1 more

stable

kernel-5.11.11-200.fc33, kernel-headers-5.11.11-200.fc33, & 1 more

FEDORA-2021-2306e89112 created by jforbes 5 years ago for Fedora 33

The 5.11.11 stable kernel update contains a number of important fixes across the tree.

Reboot Required

After installing this update it is required that you reboot your system to ensure the changes supplied by this update are applied properly.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-2306e89112

This update has been submitted for testing by jforbes.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

This update's test gating status has been changed to 'waiting'.

5 years ago

This update's test gating status has been changed to 'ignored'.

5 years ago

bretth commented & provided feedback 5 years ago

karma

Default & performance tests pass (KVM)

Test Case kernel regression

This update has been pushed to testing.

5 years ago

amandacavalcante commented & provided feedback 5 years ago

karma

All tests passed Fedora 33 Mate on Acer NITRO 5 AN515-54 V1.30 Intel i5-9300H (8) @4.100GHz GPU: Intel UHD Graphics 630 GPU: NVIDIA GeForce GTX 1650 Mobile / Max-Q

Test Case kernel regression

This update can be pushed to stable now if the maintainer wishes

5 years ago

ibims commented & provided feedback 5 years ago

karma

Looks ok for me. Works on baremetal (non UEFI mode) AMD Ryzen5 3600, Mainboard MSI B450M Mortar Max with prop. nvidia driver from rpmfusion.org (GTX980 card), something isn't able to build with VirtualBox 6.1.18 from Oracle. Have to wait for a new release of VB, but it works with the Virtualbox Testbuild. Works with Gnome-Desktop (Xorg). Regression test passed (paxtest, selinux-dac-controls and libhugetlbfs skipped).

Test Case kernel regression

clop commented & provided feedback 5 years ago

karma

I tested this on lenovo t490s with UHD Graphics 620 and Thunderbolt 3. Solving the USB-C dock issue.

BZ#1879442 External display on Lenovo USB-C dock no longer initialized

markec commented & provided feedback 5 years ago

karma

t490s also fine.

bojan provided feedback 5 years ago

karma

geraldosimiao commented & provided feedback 5 years ago

karma

Works fine, all tests passed.

Test Case kernel regression

g6avk commented & provided feedback 5 years ago

karma

Works for me, it's been running for a few hours now with no issues noticed.
The enabled Default and Performance tests pass OK. AMD 965, x86_64 work station, SSD's > RAID1. Plasma DE from Zawertun's COPR, X-server, nVidia GTX 650 (GK107) nVidia RPM's from Negativo17 (460.67)

Test Case kernel regression

sergong commented & provided feedback 5 years ago

karma

This kernel no longer boots on aarch64 (tested on Mac Mini M1 in Parallels VM). Note that this was true for 5.11.10-200.fc33. 5.10 kernels were working fine.

ersen provided feedback 5 years ago

karma

Test Case kernel regression

amessina provided feedback 5 years ago

karma

This update has been submitted for stable by jforbes.

5 years ago

jforbes edited this update.

5 years ago

This update has been pushed to stable.

5 years ago

mharpau provided feedback 5 years ago

karma

Test Case kernel regression

Please log in to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

modified

5 years ago

Builds

kernel-5.11.11-200.fc33

kernel-headers-5.11.11-200.fc33

kernel-tools-5.11.11-200.fc33

BZ#1945345 CVE-2021-29646 kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c

BZ#1945346 CVE-2021-29646 kernel: improper input validation in tipc_nl_retrieve_key function in net/tipc/node.c [fedora-all]

BZ#1945361 CVE-2021-29647 kernel: information disclosure due to uninitialized data structure in qrtr_recvmsg function in net/qrtr/qrtr.c

BZ#1945362 CVE-2021-29647 kernel: information disclosure due to uninitialized data structure in qrtr_recvmsg function in net/qrtr/qrtr.c [fedora-all]

BZ#1945373 CVE-2021-29648 kernel: DoS due to BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF

BZ#1945374 CVE-2021-29648 kernel: DoS due to BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF [fedora-all]

BZ#1945379 CVE-2021-29649 kernel: memory leak in user mode driver due to lack of cleanup steps in kernel/usermode_driver.c and kernel/bpf/preload/bpf_preload_kern.c

BZ#1945384 CVE-2021-29649 kernel: memory leak in user mode driver due to lack of cleanup steps in kernel/usermode_driver.c and kernel/bpf/preload/bpf_preload_kern.c [fedora-all]

BZ#1945388 CVE-2021-29650 kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h may lead to DoS

BZ#1945389 CVE-2021-29650 kernel: lack a full memory barrier upon the assignment of a new table value in net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h may lead to DoS [fedora-all]

kernel-5.11.11-200.fc33

kernel-headers-5.11.11-200.fc33

kernel-tools-5.11.11-200.fc33

Automated Test Results

ignored

Test Cases


0	7	Test Case kernel regression