cve-2017-17053 from cve test suite in LTP failed

[Po-Hsu Lin]

This CVE (2017-17053)[1] has been fixed in our kernels

However the cve-2017-17053 test in CVE test suite from LTP will complain that:
 tag=cve-2017-17053 stime=1558483177
 cmdline="cve-2017-17053"
 contacts=""
 analysis=exit
 <<>>
 tst_test.c:1096: INFO: Timeout per run is 0h 05m 00s
 tst_taint.c:88: BROK: Kernel is already tainted: 14849

 Summary:
 passed 0
 failed 0
 skipped 0
 warnings 0
 <<>>

This is because there are some other tests failed before this one, and taints the kernel.

[1] https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-17053.html

ProblemType: Bug
DistroRelease: Ubuntu 18.10
Package: linux-image-4.18.0-20-generic 4.18.0-20.21
ProcVersionSignature: User Name 4.18.0-20.21-generic 4.18.20
Uname: Linux 4.18.0-20-generic x86_64
AlsaDevices:
 total 0
 crw-rw---- 1 root audio 116, 1 May 22 09:45 seq
 crw-rw---- 1 root audio 116, 33 May 22 09:45 timer
AplayDevices: Error: [Errno 2] No such file or directory: 'aplay': 'aplay'
ApportVersion: 2.20.10-0ubuntu13.3
Architecture: amd64
ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord': 'arecord'
AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
Date: Wed May 22 09:49:10 2019
IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig': 'iwconfig'
Lsusb: Bus 001 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: QEMU Standard PC (i440FX + PIIX, 1996)
PciMultimedia:

ProcFB: 0 cirrusdrmfb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-4.18.0-20-generic root=UUID=2a4b0342-a2dd-4feb-b3e2-9644ca1c4a60 ro
RelatedPackageVersions:
 linux-restricted-modules-4.18.0-20-generic N/A
 linux-backports-modules-4.18.0-20-generic N/A
 linux-firmware 1.175.4
RfKill: Error: [Errno 2] No such file or directory: 'rfkill': 'rfkill'
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 04/01/2014
dmi.bios.vendor: SeaBIOS
dmi.bios.version: Ubuntu-1.8.2-1ubuntu1
dmi.chassis.type: 1
dmi.chassis.vendor: QEMU
dmi.chassis.version: pc-i440fx-xenial
dmi.modalias: dmi:bvnSeaBIOS:bvrUbuntu-1.8.2-1ubuntu1:bd04/01/2014:svnQEMU:pnStandardPC(i440FX+PIIX,1996):pvrpc-i440fx-xenial:cvnQEMU:ct1:cvrpc-i440fx-xenial:
dmi.product.name: Standard PC (i440FX + PIIX, 1996)
dmi.product.version: pc-i440fx-xenial
dmi.sys.vendor: QEMU

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This change was made by a bot.

[Po-Hsu Lin (cypressyew)]

It's the insmod01_sh test from commands test suite that taints the kernel:

glameow kernel: [271396.718171] ltp_insmod01: loading out-of-tree module taints kernel.
glameow kernel: [271396.718175] ltp_insmod01: module license 'unspecified' taints kernel.
glameow kernel: [271396.718176] Disabling lock debugging due to kernel taint
glameow kernel: [271396.718238] ltp_insmod01: module verification failed: signature and/or required key missing - tainting kernel

[Po-Hsu Lin (cypressyew)]

http://lists.linux.it/pipermail/ltp/2019-May/012200.html

Looks like this was caused by something else.

[Po-Hsu Lin (cypressyew)]

The cause looks like to be the block_dev from kenrel_misc https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/1831595

[Po-Hsu Lin (cypressyew)]

It's confirmed that this is caused by the block_dev test from kernel_misc, suggestion from upstream is to run this test separately.

A test shows this can be fix if we move the kernel_misc test to the end.

[Po-Hsu Lin (cypressyew)]

https://kernel.ubuntu.com/git/ubuntu/autotest-client-tests.git/commit/?id=3e8b51ea9866f8b7f0e49d116b4c95882cc3379d

[Po-Hsu Lin (cypressyew)]

Still can be see on Bionic even with kernel_misc moved to the last.
(node naumann with B-4.15)

This needs to be investigated.

[Po-Hsu Lin (cypressyew)]

Found on B-Azure-5.3 with instance Standard_DS4_v2

[Po-Hsu Lin (cypressyew)]

Passed with B-AWS-5.0 this cycle (5.0.0-1022.25~18.04.1)

[Po-Hsu Lin (cypressyew)]

After moving kernel_misc out, this issue did not exist anymore.