openvswitch fails on raspberry pi 4

Bug #2040524 reported by Sean Matula
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-raspi (Ubuntu)
Fix Released
Undecided
Unassigned
Jammy
Fix Released
Undecided
Unassigned
Lunar
Fix Released
Undecided
Unassigned
Mantic
Fix Released
Undecided
Unassigned

Bug Description

[Impact]

microovn snap is not working.

[Fix]

Add openvswitch module to linux-modules.

[Test Case]

See 'Original description' below.

[Regression Potential]

Just moving a kernel module which might be loaded on more systems now. If bad, the usual kernel freezes/crashes/...

[Original Descritption]

I have a homelab and I'm experimenting with adding arm nodes to my existing cluster. MicroOVN works fine on my x86_64 nodes but fails on my arm nodes (raspberry pi 4).

I am using microovn 22.03/stable (rev 295). When I run "microovn init" on the arm nodes, I get the error

Error: Post "http://control.socket/cluster/control": context deadline exceeded

The output from "snap services microovn" is:

Service Startup Current Notes
microovn.central disabled inactive -
microovn.chassis enabled active -
microovn.daemon enabled active -
microovn.ovn-northd disabled inactive -
microovn.ovn-ovsdb-server-nb disabled inactive -
microovn.ovn-ovsdb-server-sb disabled inactive -
microovn.refresh-expiring-certs enabled inactive timer-activated
microovn.switch enabled inactive -

The output from "systemctl | grep ovn" is:

 run-snapd-ns-microovn.mnt.mount loaded active mounted /run/snapd/ns/microovn.mnt
  snap-microovn-301.mount loaded active mounted Mount unit for microovn, revision 301
  snap.microovn.chassis.service loaded active running Service for snap application microovn.chassis
  snap.microovn.daemon.service loaded active running Service for snap application microovn.daemon
● snap.microovn.switch.service loaded failed failed Service for snap application microovn.switch
  snap.microovn.refresh-expiring-certs.timer loaded active waiting Timer refresh-expiring-certs for snap application microovn.refresh-expiring-certs

The output from "journalctl -b -u snap.microovn.switch.service" is (in relevant part):

Oct 25 10:55:27 pi01 systemd[1]: Started Service for snap application microovn.switch.
Oct 25 10:55:28 pi01 microovn.switch[7315]: * /var/snap/microovn/common/data/switch/db/conf.db does not exist
Oct 25 10:55:28 pi01 microovn.switch[7315]: * Creating empty database /var/snap/microovn/common/data/switch/db/conf.db
Oct 25 10:55:28 pi01 microovn.switch[7315]: * Starting ovsdb-server
Oct 25 10:55:28 pi01 ovs-vsctl[7338]: ovs|00001|vsctl|INFO|Called as ovs-vsctl --no-wait -- init -- set Open_vSwitch . db-version=8.3.0
Oct 25 10:55:28 pi01 ovs-vsctl[7348]: ovs|00001|vsctl|INFO|Called as ovs-vsctl --no-wait set Open_vSwitch . ovs-version=2.17.7 "external-ids:system-id=\"pi01\"" "external-ids:rundir=\"/var/snap/microovn/>
Oct 25 10:55:28 pi01 microovn.switch[7315]: * Configuring Open vSwitch system IDs
Oct 25 10:55:28 pi01 microovn.switch[7380]: /snap/microovn/301/share/openvswitch/scripts/ovs-kmod-ctl: 112: modprobe: Permission denied

Revision history for this message
Sean Matula (sematula) wrote :

Installing the "linux-modules-extra-raspi" package on my raspberry pi nodes resolved the issue.

Revision history for this message
Frode Nordahl (fnordahl) wrote :

Thank you for taking the time to report this issue. This should definitely be documented in microcloud/microovn.

Added a task for the linux-raspi package for evaluating whether the openvswitch module should be included in the main modules package?

Juerg Haefliger (juergh)
tags: added: kern-8538
Revision history for this message
Juerg Haefliger (juergh) wrote :

Is the openvswitch module (and its dependencies) the only modules that is required from -extra or are there others? Can you post the output of lsmod?

Changed in linux-raspi (Ubuntu):
status: New → Incomplete
Changed in microovn:
status: New → Invalid
Juerg Haefliger (juergh)
Changed in linux-raspi (Ubuntu):
status: Incomplete → Confirmed
status: Confirmed → New
Changed in microovn:
status: Invalid → New
description: updated
Changed in microovn:
status: New → Invalid
Changed in linux-raspi (Ubuntu):
status: New → Confirmed
Juerg Haefliger (juergh)
affects: microovn → linux (Ubuntu)
affects: linux-raspi (Ubuntu) → microovn
affects: microovn → linux-raspi (Ubuntu)
no longer affects: linux (Ubuntu)
no longer affects: linux (Ubuntu Jammy)
no longer affects: linux (Ubuntu Lunar)
no longer affects: linux (Ubuntu Mantic)
Revision history for this message
Sean Matula (sematula) wrote :
Download full text (6.9 KiB)

Here is the output of "lsmod" from a RPI-4 node:

Module Size Used by
geneve 45056 0
nfnetlink_cttimeout 24576 0
openvswitch 176128 3
nsh 16384 1 openvswitch
nf_conncount 24576 1 openvswitch
arp_tables 32768 0
tls 118784 11
ipt_REJECT 16384 0
nf_reject_ipv4 16384 1 ipt_REJECT
xt_set 20480 4
ipt_rpfilter 16384 1
vxlan 81920 0
iptable_raw 16384 1
ip_set_hash_ip 49152 1
ip_set_hash_net 57344 3
ip_set 57344 3 ip_set_hash_ip,xt_set,ip_set_hash_net
xfrm_user 49152 1
xfrm_algo 16384 1 xfrm_user
wireguard 94208 0
libchacha20poly1305 16384 1 wireguard
chacha_neon 24576 1 libchacha20poly1305
poly1305_neon 24576 1 libchacha20poly1305
libcurve25519_generic 40960 1 wireguard
libchacha 16384 1 chacha_neon
ip6_udp_tunnel 16384 3 geneve,wireguard,vxlan
udp_tunnel 28672 3 geneve,wireguard,vxlan
xt_multiport 20480 5
veth 32768 0
nf_conntrack_netlink 53248 0
xt_addrtype 16384 9
xt_statistic 20480 4
xt_nat 16384 19
xt_tcpudp 20480 49
nbd 57344 0
rbd 122880 0
libceph 487424 1 rbd
overlay 155648 12
ip6table_filter 16384 1
ip6table_nat 16384 1
ip6table_mangle 16384 1
ip6_tables 36864 3 ip6table_filter,ip6table_nat,ip6table_mangle
xt_MASQUERADE 20480 5
xt_mark 16384 47
iptable_nat 16384 1
nf_nat 49152 5 ip6table_nat,xt_nat,openvswitch,iptable_nat,xt_MASQUERADE
xt_conntrack 16384 26
nf_conntrack 184320 8 xt_conntrack,nf_nat,nfnetlink_cttimeout,xt_nat,openvswitch,nf_conntrack_netlink,nf_conncount,xt_MASQUERADE
nf_defrag_ipv6 24576 2 nf_conntrack,openvswitch
nf_defrag_ipv4 16384 1 nf_conntrack
iptable_mangle 16384 1
br_netfilter 32768 0
bridge 319488 1 br_netfilter
nft_counter 16384 2
nft_compat 20480 2
nf_tables 253952 10 nft_compat,nft_counter
nfnetlink 20480 7 nft_compat,nfnetlink_cttimeout,nf_conntrack_netlink,nf_tables,ip_set
iptable_filter 16384 1
xt_comment 16384 221
bpfilter 16384 0
cmac 16384 3
algif_hash 24576 1
algif_skcipher 20480 1
af_alg 32768 6 algif_hash,algif_skcipher
bnep 32768 2
hci_uart 155648 1
btqca 24576 1 hci_uart
btrtl 24576 1 hci_uart
btbcm 28672 1 hci_uart
btintel 45056 1 hci_uart
8021q 40960 0
garp 20480 1 8021q
mrp 20480 1 8021q
stp 20480 2 bridge,garp
llc 20480 3 bridge,stp,garp
binfmt_misc 24576 1
btsdio 20480 0
bluetoot...

Read more...

Juerg Haefliger (juergh)
Changed in linux-raspi (Ubuntu Jammy):
status: New → Fix Committed
Changed in linux-raspi (Ubuntu Lunar):
status: New → Fix Committed
Changed in linux-raspi (Ubuntu Mantic):
status: New → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-raspi/6.2.0-1018.20 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-lunar-linux-raspi' to 'verification-done-lunar-linux-raspi'. If the problem still exists, change the tag 'verification-needed-lunar-linux-raspi' to 'verification-failed-lunar-linux-raspi'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-raspi/5.15.0-1044.47 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy-linux-raspi' to 'verification-done-jammy-linux-raspi'. If the problem still exists, change the tag 'verification-needed-jammy-linux-raspi' to 'verification-failed-jammy-linux-raspi'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-lunar-linux-raspi-v2 verification-needed-lunar-linux-raspi
tags: added: kernel-spammed-jammy-linux-raspi-v2 verification-needed-jammy-linux-raspi
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-raspi/6.5.0-1008.11 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-mantic-linux-raspi' to 'verification-done-mantic-linux-raspi'. If the problem still exists, change the tag 'verification-needed-mantic-linux-raspi' to 'verification-failed-mantic-linux-raspi'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-mantic-linux-raspi-v2 verification-needed-mantic-linux-raspi
Revision history for this message
Ghislain Bourgeois (ghibourg) wrote :

I validated that this fix the issue on jammy. I was able to initialize MicroCloud with MicroOVN on my Raspberry Pi 4.

Revision history for this message
Ghislain Bourgeois (ghibourg) wrote :
Download full text (4.6 KiB)

root@pi3:~# apt install linux-raspi/jammy-proposed linux-headers-raspi/jammy-proposed
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Selected version '5.15.0.1044.42' (Ubuntu:22.04/jammy-proposed [arm64]) for 'linux-raspi'
Selected version '5.15.0.1044.42' (Ubuntu:22.04/jammy-proposed [arm64]) for 'linux-headers-raspi'
The following additional packages will be installed:
  linux-headers-5.15.0-1044-raspi linux-image-5.15.0-1044-raspi linux-image-raspi linux-modules-5.15.0-1044-raspi
  linux-raspi-headers-5.15.0-1044
Suggested packages:
  fdutils linux-raspi-doc-5.15.0 | linux-raspi-source-5.15.0 linux-raspi-tools linux-modules-extra-5.15.0-1044-raspi
The following NEW packages will be installed:
  linux-headers-5.15.0-1044-raspi linux-image-5.15.0-1044-raspi linux-modules-5.15.0-1044-raspi
  linux-raspi-headers-5.15.0-1044
The following packages will be upgraded:
  linux-headers-raspi linux-image-raspi linux-raspi
3 upgraded, 4 newly installed, 0 to remove and 2 not upgraded.
Need to get 60.1 MB of archives.
After this operation, 295 MB of additional disk space will be used.
Do you want to continue? [Y/n]
Get:1 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-raspi-headers-5.15.0-1044 arm64 5.15.0-1044.47 [12.4 MB]
Get:2 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-headers-5.15.0-1044-raspi arm64 5.15.0-1044.47 [1060 kB]
Get:3 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-modules-5.15.0-1044-raspi arm64 5.15.0-1044.47 [36.2 MB]
Get:4 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-image-5.15.0-1044-raspi arm64 5.15.0-1044.47 [10.5 MB]
Ign:4 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-image-5.15.0-1044-raspi arm64 5.15.0-1044.47
Get:5 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-raspi arm64 5.15.0.1044.42 [1710 B]
Get:6 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-image-raspi arm64 5.15.0.1044.42 [2456 B]
Get:7 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-headers-raspi arm64 5.15.0.1044.42 [2390 B]
Get:4 http://ports.ubuntu.com/ubuntu-ports jammy-proposed/main arm64 linux-image-5.15.0-1044-raspi arm64 5.15.0-1044.47 [10.5 MB]
Fetched 53.7 MB in 15s (3558 kB/s)
Selecting previously unselected package linux-raspi-headers-5.15.0-1044.
(Reading database ... 103946 files and directories currently installed.)
Preparing to unpack .../0-linux-raspi-headers-5.15.0-1044_5.15.0-1044.47_arm64.deb ...
Unpacking linux-raspi-headers-5.15.0-1044 (5.15.0-1044.47) ...
Selecting previously unselected package linux-headers-5.15.0-1044-raspi.
Preparing to unpack .../1-linux-headers-5.15.0-1044-raspi_5.15.0-1044.47_arm64.deb ...
Unpacking linux-headers-5.15.0-1044-raspi (5.15.0-1044.47) ...
Selecting previously unselected package linux-modules-5.15.0-1044-raspi.
Preparing to unpack .../2-linux-modules-5.15.0-1044-raspi_5.15.0-1044.47_arm64.deb ...
Unpacking linux-modules-5.15.0-1044-raspi (5.15.0-1044.47) ...
Selecting previously unselected package linux-image-5.15.0-1044-raspi.
Preparing to unpack .../3-linux-image-5.15.0-1044-raspi_...

Read more...

tags: added: verification-done-jammy-linux-raspi
removed: verification-needed-jammy-linux-raspi
Revision history for this message
Juerg Haefliger (juergh) wrote :

Installed linux-image-6.5.0-1008-raspi from mantic-proposed and verified microovn switch status:

$ sudo systemctl status snap.microovn.switch.service
● snap.microovn.switch.service - Service for snap application microovn.switch
     Loaded: loaded (/etc/systemd/system/snap.microovn.switch.service; enabled; preset: enabled)
     Active: active (running) since Tue 2023-11-28 08:58:22 UTC; 1h 20min ago
   Main PID: 773 (switch.start)
      Tasks: 13 (limit: 2096)
     Memory: 82.7M
        CPU: 44.662s
     CGroup: /system.slice/snap.microovn.switch.service
             ├─ 773 /bin/sh /snap/microovn/344/commands/switch.start
             ├─1380 "ovsdb-server: monitoring pid 1381 (healthy)"
             ├─1381 ovsdb-server /var/snap/microovn/common/data/switch/db/conf.db -vconsole:emer -vsyslog:err -vfile:info --remote=punix:/var/snap/microovn/common/run/switch/db.sock --private-key=db:Open_vSwitch,SSL,private_key ->
             ├─1418 "ovs-vswitchd: monitoring pid 1419 (healthy)"
             ├─1419 ovs-vswitchd unix:/var/snap/microovn/common/run/switch/db.sock -vconsole:emer -vsyslog:err -vfile:info --mlockall -vsyslog:info -vfile:off --no-chdir --log-file=/var/snap/microovn/common/logs/ovs-vswitchd.log >
             └─1455 sleep infinity

Nov 28 08:58:59 rpi-4b-rev1d2-164b ovs-vswitchd[1419]: ovs|00032|bridge|INFO|bridge br-int: using datapath ID 00009e73b0561f60
Nov 28 08:58:59 rpi-4b-rev1d2-164b ovs-vswitchd[1419]: ovs|00033|connmgr|INFO|br-int: added service controller "punix:/var/snap/microovn/common/run/switch/br-int.mgmt"
Nov 28 08:58:59 rpi-4b-rev1d2-164b microovn.switch[987]: * Starting ovs-vswitchd
Nov 28 08:58:59 rpi-4b-rev1d2-164b ovs-vswitchd[1419]: ovs|00034|bridge|INFO|ovs-vswitchd (Open vSwitch) 2.17.7
Nov 28 08:58:59 rpi-4b-rev1d2-164b microovn.switch[987]: * Enabling remote OVSDB managers
Nov 28 08:58:59 rpi-4b-rev1d2-164b ovs-vsctl[1456]: ovs|00001|vsctl|INFO|Called as ovs-vsctl --no-wait add Open_vSwitch . external-ids hostname=rpi-4b-rev1d2-164b.localdomain
Nov 28 08:59:08 rpi-4b-rev1d2-164b ovsdb-server[1381]: ovs|00003|memory|INFO|5636 kB peak resident set size after 10.1 seconds
Nov 28 08:59:08 rpi-4b-rev1d2-164b ovsdb-server[1381]: ovs|00004|memory|INFO|atoms:179 cells:130 monitors:3 sessions:2
Nov 28 08:59:09 rpi-4b-rev1d2-164b ovs-vswitchd[1419]: ovs|00035|memory|INFO|71120 kB peak resident set size after 10.4 seconds
Nov 28 08:59:09 rpi-4b-rev1d2-164b ovs-vswitchd[1419]: ovs|00036|memory|INFO|handlers:4 idl-cells:100 ofconns:2 ports:1 revalidators:2 rules:4

tags: added: verification-done-mantic-linux-raspi
removed: verification-needed-mantic-linux-raspi
Revision history for this message
Juerg Haefliger (juergh) wrote :

Installed linux-image-6.2.0-1018-raspi from lunar-proposed and verified microovn switch status:

$ sudo systemctl status snap.microovn.switch.service
● snap.microovn.switch.service - Service for snap application microovn.switch
     Loaded: loaded (/etc/systemd/system/snap.microovn.switch.service; enabled; preset: enabled)
     Active: active (running) since Tue 2023-11-28 13:12:02 UTC; 1h 25min ago
   Main PID: 728 (switch.start)
      Tasks: 13 (limit: 2089)
     Memory: 76.0M
        CPU: 49.840s
     CGroup: /system.slice/snap.microovn.switch.service
             ├─ 728 /bin/sh /snap/microovn/344/commands/switch.start
             ├─1354 "ovsdb-server: monitoring pid 1355 (healthy)"
             ├─1355 ovsdb-server /var/snap/microovn/common/data/switch/db/conf.db -vconsole:emer -vsyslog:err -vfile:info --remote=punix:/var/snap/microovn/common/run/switch/db.sock --private-key=db:Open_vSwitch,SSL,private_key --certificate=db:Open_vSwitch,SSL,certificate --bootstrap-ca-cert=db>
             ├─1389 "ovs-vswitchd: monitoring pid 1390 (healthy)"
             ├─1390 ovs-vswitchd unix:/var/snap/microovn/common/run/switch/db.sock -vconsole:emer -vsyslog:err -vfile:info --mlockall -vsyslog:info -vfile:off --no-chdir --log-file=/var/snap/microovn/common/logs/ovs-vswitchd.log --pidfile=/var/snap/microovn/common/run/switch/ovs-vswitchd.pid --d>
             └─1436 sleep infinity

Nov 28 13:12:07 rpi-4b-rev1d2-164b ovs-vswitchd[1390]: ovs|00034|bridge|INFO|ovs-vswitchd (Open vSwitch) 2.17.7
Nov 28 13:12:07 rpi-4b-rev1d2-164b ovs-vsctl[1420]: ovs|00001|vsctl|INFO|Called as ovs-vsctl --no-wait add Open_vSwitch . external-ids hostname=rpi-4b-rev1d2-164b.localdomain
Nov 28 13:12:07 rpi-4b-rev1d2-164b microovn.switch[963]: * Enabling remote OVSDB managers
Nov 28 13:12:07 rpi-4b-rev1d2-164b ovsdb-server[1355]: ovs|00003|jsonrpc|WARN|unix#7: receive error: Connection reset by peer
Nov 28 13:12:07 rpi-4b-rev1d2-164b ovsdb-server[1355]: ovs|00004|reconnect|WARN|unix#7: connection dropped (Connection reset by peer)
Nov 28 13:12:16 rpi-4b-rev1d2-164b ovsdb-server[1355]: ovs|00005|memory|INFO|5508 kB peak resident set size after 10.1 seconds
Nov 28 13:12:16 rpi-4b-rev1d2-164b ovsdb-server[1355]: ovs|00006|memory|INFO|atoms:183 cells:130 monitors:3 sessions:2
Nov 28 13:12:17 rpi-4b-rev1d2-164b ovs-vswitchd[1390]: ovs|00035|memory|INFO|70996 kB peak resident set size after 10.1 seconds
Nov 28 13:12:17 rpi-4b-rev1d2-164b ovs-vswitchd[1390]: ovs|00036|memory|INFO|handlers:4 idl-cells:100 ofconns:3 ports:1 revalidators:2 rules:9
Nov 28 13:12:17 rpi-4b-rev1d2-164b ovs-vswitchd[1390]: ovs|00037|connmgr|INFO|br-int<->unix#1: 6 flow_mods 10 s ago (5 adds, 1 deletes)

tags: added: verification-done-lunar-linux-raspi
removed: verification-needed-lunar-linux-raspi
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (39.1 KiB)

This bug was fixed in the package linux-raspi - 6.2.0-1018.20

---------------
linux-raspi (6.2.0-1018.20) lunar; urgency=medium

  * lunar/linux-raspi: 6.2.0-1018.20 -proposed tracker (LP: #2041550)

  * openvswitch fails on raspberry pi 4 (LP: #2040524)
    - [Packaging] raspi: Include openvswitch in linux-modules

  [ Ubuntu: 6.2.0-39.40 ]

  * lunar/linux: 6.2.0-39.40 -proposed tracker (LP: #2043451)
  * USB bus error after upgrading to proposed kernel on lunar and jammy
    (LP: #2043197)
    - USB: core: Fix oversight in SuperSpeed initialization
  * Include cifs.ko in linux-modules package (LP: #2042546)
    - [Packaging] Replace fs/cifs with fs/smb/client in inclusion list

  [ Ubuntu: 6.2.0-38.39 ]

  * lunar/linux: 6.2.0-38.39 -proposed tracker (LP: #2041557)
  * CVE-2023-25775
    - RDMA/irdma: Prevent zero-length STAG registration
  * CVE-2023-5345
    - fs/smb/client: Reset password pointer to NULL
  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read
  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics
  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules
  * CVE-2023-45871
    - igb: set max size RX buffer when store bad packet is enabled
  * CVE-2023-39193
    - netfilter: xt_sctp: validate the flag_info count
  * CVE-2023-39192
    - netfilter: xt_u32: validate user space input
  * CVE-2023-31085
    - ubi: Refuse attaching if mtd's erasesize is 0
  * CVE-2023-5717
    - perf: Disallow mis-matched inherited group reads
  * CVE-2023-5178
    - nvmet-tcp: Fix a possible UAF in queue intialization setup
  * CVE-2023-5158
    - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
  * CVE-2023-5090
    - x86: KVM: SVM: always update the x2avic msr interception
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
    - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
      probe
  * Lunar update: upstream stable patchset 2023-10-19 (LP: #2039884)
    - ACPI: thermal: Drop nocrt parameter
    - module: Expose module_init_layout_section()
    - arm64: module-plts: inline linux/moduleloader.h
    - arm64: module: Use module_init_layout_section() to spot init sections
    - ARM: module: Use module_init_layout_section() to spot init sections
    - lockdep: fix static memory detection even more
    - parisc: Cleanup mmap implementation regarding color alignment
    - parisc: sys_parisc: parisc_personality() is called from asm code
    - io_uring/parisc: Adjust pgoff in io_uring mmap() for parisc
    - kallsyms: Fix kallsyms_selftest failure
    - module/decompress: use vmalloc() for zstd decompression workspace
    - Upstream stable to v6.1.51, v6.4.14
    - erofs: ensure that the post-EOF tails are all zeroed
    - ksmbd: fix wrong DataOffset validation of create context
    - ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob()
    - ksmbd: replace one-element...

Changed in linux-raspi (Ubuntu Lunar):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (5.4 KiB)

This bug was fixed in the package linux-raspi - 6.5.0-1008.11

---------------
linux-raspi (6.5.0-1008.11) mantic; urgency=medium

  * mantic/linux-raspi: 6.5.0-1008.11 -proposed tracker (LP: #2041533)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)

  * drop all references to is_rust_module.sh in kernels >= 6.5 (LP: #2038611)
    - [Packaging] raspi: drop references to is_rust_module.sh

  * Unnecessary armhf DTB (LP: #2039431)
    - [Config] raspi: Set ARCH_BRCMSTB=n for armhf

  * disable shiftfs (LP: #2038522)
    - [Config] raspi: disable shiftfs

  * openvswitch fails on raspberry pi 4 (LP: #2040524)
    - [Packaging] raspi: Include openvswitch in linux-modules

  * Fan speed control not working on Pi 5 under Ubuntu 23.10 (LP: #2041741)
    - driver: thermal: step_wise: Fix uninitialized variable

  * Raspberry Pi 3B+ doesnt boot from USB on 23.10 Mantic (LP: #2039786)
    - SAUCE: Revert "usb: misc: onboard-hub: add support for Microchip USB2514B
      USB 2.0 hub"

  [ Ubuntu: 6.5.0-14.14 ]

  * mantic/linux: 6.5.0-14.14 -proposed tracker (LP: #2042660)
  * Boot log print hang on screen, no login prompt on Aspeed 2600 rev 52 BMC
    (LP: #2042850)
    - drm/ast: Add BMC virtual connector
  * arm64 atomic issues cause disk corruption (LP: #2042573)
    - locking/atomic: scripts: fix fallback ifdeffery
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

  [ Ubuntu: 6.5.0-12.12 ]

  * mantic/linux: 6.5.0-12.12 -proposed tracker (LP: #2041536)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)
  * CVE-2023-5633
    - drm/vmwgfx: Keep a gem reference to user bos in surfaces
  * CVE-2023-5345
    - fs/smb/client: Reset password pointer to NULL
  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read
  * CVE-2023-4244
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor: open userns related sysctl so lxc can check if restriction
      are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor: fix request field from a prompt reply that denies all
      access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor: fix oops when racing to retrieve notification
  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics
  * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor
      Lake
    - SAUCE: platform/x86: int3472: Add handshake GPIO function
  * CVE-2023-45898
    - ext4: fix slab-use-after-free in ext4_es_insert_extent(...

Read more...

Changed in linux-raspi (Ubuntu Mantic):
status: Fix Committed → Fix Released
Revision history for this message
Sean Matula (sematula) wrote :

Thank you everyone!

Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (23.4 KiB)

This bug was fixed in the package linux-raspi - 5.15.0-1044.47

---------------
linux-raspi (5.15.0-1044.47) jammy; urgency=medium

  * jammy/linux-raspi: 5.15.0-1044.47 -proposed tracker (LP: #2041598)

  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] raspi: Make WWAN driver loadable modules

  * openvswitch fails on raspberry pi 4 (LP: #2040524)
    - [Packaging] raspi: Include openvswitch in linux-modules

  [ Ubuntu: 5.15.0-91.101 ]

  * jammy/linux: 5.15.0-91.101 -proposed tracker (LP: #2043452)
  * USB bus error after upgrading to proposed kernel on lunar and jammy
    (LP: #2043197)
    - USB: core: Fix oversight in SuperSpeed initialization

  [ Ubuntu: 5.15.0-90.100 ]

  * jammy/linux: 5.15.0-90.100 -proposed tracker (LP: #2041603)
  * CVE-2023-25775
    - RDMA/irdma: Remove irdma_uk_mw_bind()
    - RDMA/irdma: Remove irdma_sc_send_lsmm_nostag()
    - RDMA/irdma: Remove irdma_cqp_up_map_cmd()
    - RDMA/irdma: Remove irdma_get_hw_addr()
    - RDMA/irdma: Make irdma_uk_cq_init() return a void
    - RDMA/irdma: optimize rx path by removing unnecessary copy
    - RDMA/irdma: Remove enum irdma_status_code
    - RDMA/irdma: Remove excess error variables
    - RDMA/irdma: Prevent zero-length STAG registration
  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read
  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics
  * CVE-2023-45871
    - igb: set max size RX buffer when store bad packet is enabled
  * CVE-2023-39193
    - netfilter: xt_sctp: validate the flag_info count
  * CVE-2023-39192
    - netfilter: xt_u32: validate user space input
  * CVE-2023-31085
    - ubi: Refuse attaching if mtd's erasesize is 0
  * CVE-2023-5717
    - perf: Disallow mis-matched inherited group reads
  * CVE-2023-5178
    - nvmet-tcp: Fix a possible UAF in queue intialization setup
  * CVE-2023-5158
    - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules
  * HP ProBook 450 G8 Notebook fail to wifi test (LP: #2037513)
    - iwlwifi: mvm: Don't fail if PPAG isn't supported
    - wifi: iwlwifi: fw: skip PPAG for JF
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * scripts/pahole-flags.sh change return to exit 0 (LP: #2035123)
    - SAUCE: scripts/pahole-flags.sh change return to exit 0
  * Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
    - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
      probe
  * Jammy update: v5.15.131 upstream stable release (LP: #2039610)
    - erofs: ensure that the post-EOF tails are all zeroed
    - ksmbd: fix wrong DataOffset validation of create context
    - ksmbd: replace one-element array with flex-array member in struct
      smb2_ea_info
    - ARM: pxa: remove use of symbol_get()
    - mmc: au1xmmc: force non-modular build and remove symbol_get usage
    - net: enetc: use EXPORT_SYMBO...

Changed in linux-raspi (Ubuntu Jammy):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (49.6 KiB)

This bug was fixed in the package linux-raspi - 6.7.0-1001.1

---------------
linux-raspi (6.7.0-1001.1) noble; urgency=medium

  * noble/linux-raspi: 6.7.0-1001.1 -proposed tracker (LP: #2051136)

  * Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md
    - [Packaging] update update.conf
    - debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)

  * Remove linux-modules-extra (LP: #2048862)
    - [Packaging] raspi: Remove linux-modules-extra package

  * Make dwc2 the default (LP: #2048861)
    - SAUCE: ARM: dts: bcm27xx: Make dwc2 the default

  * Raspberry Pi 3B+ doesnt boot from USB on 23.10 Mantic (LP: #2039786)
    - SAUCE: Revert "usb: misc: onboard-hub: add support for Microchip USB2514B
      USB 2.0 hub"

  * Missing overlays/README (LP: #1954757)
    - SAUCE: (no-up) Install overlays/README

  * [Raspberry Pi/lunar] systemd-oomd fails with
    "ConditionControlGroupController=memory was not met" (LP: #2017209)
    - SAUCE: Revert "cgroup: Disable cgroup "memory" by default"

  * Remove armhf support (LP: #2048864)
    - [Packaging] raspi: Remove armhf packages
    - [Packaging] raspi: Remove armhf ABI files

  * Miscellaneous Ubuntu changes
    - [Packaging] raspi: Initial import of debian.raspi from mantic:linux-raspi
      (6.5.0-1010.13)
    - [Packaging] raspi: Sync packaging files from debian.master
    - [Packaging] raspi: Initial version of linux-raspi for Noble
    - [Config] raspi: updateconfigs after rebase to Ubuntu-6.7.0-2.2
    - [Config] raspi: Include master annotations
    - [Packaging] raspi: Disable all ABI checks
    - SAUCE: Revert "iommu: Retire map/unmap ops"
    - [Packaging] raspi: Import of upstream raspberrypi patchset
    - [Config] raspi: updateconfigs after import of rpi-6.6.y patchset
    - [Config] raspi: Set SWIOTLB_DYNAMIC=n
    - SAUCE: arm64: dts: broadcom: Remove downstream dt overlay support
    - SAUCE: (no-up) ARM: dts: Disable unsupported Raspberry Pi DTBs
    - SAUCE: ARM: dts: Fix broken symlinks
    - SAUCE: ARM: dts: overlays: Fix file permissions
    - [Packaging] raspi: Update reconstruct script

  * Miscellaneous upstream changes
    - raspberrypi-firmware: Update mailbox commands
    - drm/vc4: Add FKMS as an acceptable node for dma ranges.
    - drm/atomic: Don't fixup modes that haven't been reset
    - drm/vc4: Allow setting the TV norm via module parameter
    - drm/vc4: Add firmware-kms mode
    - drm/vc4: Add support for gamma on BCM2711
    - drm/vc4: Add debugfs node that dumps the vc5 gamma PWL entries
    - drm/vc4: hvs: Force modeset on gamma lut change
    - drm/vc4: Relax VEC modeline requirements and add progressive mode support
    - drm/vc4: Make VEC progressive modes readily accessible
    - drm: Check whether the gamma lut has changed before updating
    - drm/vc4: Enable gamma block only when required.
    - drm/vc4: Only add gamma properties once.
    - drm/vc4: Validate the size of the gamma_lut
    - drm/vc4: Disable Gamma control on HVS5 due to issues writing the table
    - drm/dsi: Document the meaning and spec references for MIPI_DSI_MODE_*
    - drm/bridge: tc358762: Ignore EPROBE_DEFER when logging errors
    - vc4/drm: vc...

Changed in linux-raspi (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.