Disable CONFIG_DELL_SMBIOS_SMM, CONFIG_DELL_UART_BACKLIGHT, CONFIG_I2C_AMD_MP2

Bug #1925241 reported by Tim Gardner
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
Invalid
Undecided
Unassigned
Focal
Invalid
Undecided
Unassigned
Groovy
Invalid
Undecided
Unassigned
Hirsute
Invalid
Undecided
Unassigned
linux-gcp (Ubuntu)
Fix Released
Medium
Tim Gardner
Focal
Invalid
Undecided
Unassigned
Groovy
Fix Released
Medium
Tim Gardner
Hirsute
Fix Released
Medium
Tim Gardner
linux-gcp-5.8 (Ubuntu)
Invalid
Undecided
Unassigned
Focal
In Progress
Undecided
Unassigned
Groovy
Invalid
Undecided
Unassigned
Hirsute
Invalid
Undecided
Unassigned

Bug Description

SRU Justification:

Enforcement annotations indicate that these config options should never have been set.

[Impact]

Disable these options for hardware that does not exist in the Google cloud fabric. There should be no impact to existing users.

[Fix]

    CONFIG_DELL_SMBIOS_SMM=n
    CONFIG_DELL_UART_BACKLIGHT=n
    CONFIG_I2C_AMD_MP2=n

[Test Plan]

Boot a GCP instance and ensure there are no new kernel log errors.

[Where problems could occur]

Regression potential should be low since this HW does not exists in a GCP guest instance.

[Other Info]

CVE References

Tim Gardner (timg-tpi)
Changed in linux (Ubuntu Groovy):
status: New → Invalid
Changed in linux (Ubuntu Hirsute):
status: New → Invalid
Changed in linux-gcp (Ubuntu Groovy):
status: New → In Progress
Changed in linux-gcp (Ubuntu Hirsute):
status: New → In Progress
Changed in linux-gcp (Ubuntu Groovy):
importance: Undecided → Medium
Changed in linux-gcp (Ubuntu Hirsute):
importance: Undecided → Medium
Changed in linux-gcp (Ubuntu Groovy):
assignee: nobody → Tim Gardner (timg-tpi)
Changed in linux-gcp (Ubuntu Hirsute):
assignee: nobody → Tim Gardner (timg-tpi)
description: updated
Tim Gardner (timg-tpi)
tags: added: bot-stop-nagging
Changed in linux-gcp (Ubuntu Groovy):
status: In Progress → Fix Committed
Tim Gardner (timg-tpi)
Changed in linux-gcp-5.8 (Ubuntu Focal):
status: New → In Progress
Changed in linux-gcp-5.8 (Ubuntu Groovy):
status: New → Invalid
Changed in linux-gcp-5.8 (Ubuntu Hirsute):
status: New → Invalid
Changed in linux-gcp-5.8 (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Focal):
status: New → Invalid
Changed in linux-gcp (Ubuntu Focal):
status: New → Invalid
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-groovy' to 'verification-done-groovy'. If the problem still exists, change the tag 'verification-needed-groovy' to 'verification-failed-groovy'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-groovy
Revision history for this message
Tim Gardner (timg-tpi) wrote :

Verification done, Google cloud n1-standard-2. No dmesg errors observed.

root@selfprovisioned-rtg:~# uname -a
Linux selfprovisioned-rtg 5.8.0-1029-gcp #30-Ubuntu SMP Thu Apr 22 09:30:22 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

tags: added: verification-done-groovy
removed: verification-needed-groovy
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-focal' to 'verification-done-focal'. If the problem still exists, change the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-focal
Revision history for this message
Tim Gardner (timg-tpi) wrote :

Verification done, Google cloud n1-standard-2. No dmesg errors observed.

uname -a
Linux selfprovisioned-rtg 5.4.0-1043-gcp #46-Ubuntu SMP Mon Apr 19 19:17:04 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux

tags: added: verification-done-focal
removed: verification-needed-focal
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-gcp - 5.8.0-1031.32

---------------
linux-gcp (5.8.0-1031.32) groovy; urgency=medium

  [ Ubuntu: 5.8.0-53.60 ]

  * CVE-2021-3491
    - io_uring: fix provide_buffers sign extension
    - io_uring: fix overflows checks in provide buffers
    - SAUCE: proc: Avoid mixing integer types in mem_rw()
    - SAUCE: io_uring: truncate lengths larger than MAX_RW_COUNT on provide
      buffers
  * CVE-2021-3490
    - bpf: Fix a verifier failure with xor
    - SAUCE: bpf: verifier: fix ALU32 bounds tracking with bitwise ops
  * CVE-2021-3489
    - SAUCE: bpf: ringbuf: deny reserve of buffers larger than ringbuf
    - SAUCE: bpf: prevent writable memory-mapping of read-only ringbuf pages

 -- Stefan Bader <email address hidden> Thu, 06 May 2021 10:32:39 +0200

Changed in linux-gcp (Ubuntu Groovy):
status: Fix Committed → Fix Released
Changed in linux-gcp (Ubuntu Hirsute):
status: In Progress → Fix Committed
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (29.4 KiB)

This bug was fixed in the package linux-gcp - 5.11.0-1008.9

---------------
linux-gcp (5.11.0-1008.9) hirsute; urgency=medium

  * hirsute/linux-gcp: 5.11.0-1008.9 -proposed tracker (LP: #1927566)

  * Disable CONFIG_DELL_SMBIOS_SMM, CONFIG_DELL_UART_BACKLIGHT,
    CONFIG_I2C_AMD_MP2 (LP: #1925241)
    - [Config] gcp: Disable CONFIG_DELL_SMBIOS_SMM, CONFIG_DELL_UART_BACKLIGHT,
      CONFIG_I2C_AMD_MP2

  * Enable BLK_DEV_NVME =y to support "shielded VM minimal images"
    (LP: #1927050)
    - [config] gcp: enable BLK_DEV_NVME=y

  [ Ubuntu: 5.11.0-18.19 ]

  * hirsute/linux: 5.11.0-18.19 -proposed tracker (LP: #1927578)
  * Packaging resync (LP: #1786013)
    - update dkms package versions
  * Introduce the 465 driver series, fabric-manager, and libnvidia-nscq
    (LP: #1925522)
    - debian/dkms-versions -- add NVIDIA 465 and migrate 450 to 460
  * linux-image-5.0.0-35-generic breaks checkpointing of container
    (LP: #1857257)
    - SAUCE: overlayfs: fix incorrect mnt_id of files opened from map_files
  * Hirsute update: v5.11.17 upstream stable release (LP: #1927535)
    - vhost-vdpa: protect concurrent access to vhost device iotlb
    - Revert "UBUNTU: SAUCE: ovl: Restore vm_file value when lower fs mmap fails"
    - ovl: fix reference counting in ovl_mmap error path
    - coda: fix reference counting in coda_file_mmap error path
    - amd/display: allow non-linear multi-planar formats
    - drm/amdgpu: reserve fence slot to update page table
    - drm/amdgpu: fix GCR_GENERAL_CNTL offset for dimgrey_cavefish
    - gpio: omap: Save and restore sysconfig
    - KEYS: trusted: Fix TPM reservation for seal/unseal
    - vdpa/mlx5: Set err = -ENOMEM in case dma_map_sg_attrs fails
    - pinctrl: lewisburg: Update number of pins in community
    - block: return -EBUSY when there are open partitions in blkdev_reread_part
    - pinctrl: core: Show pin numbers for the controllers with base = 0
    - arm64: dts: allwinner: Revert SD card CD GPIO for Pine64-LTS
    - bpf: Allow variable-offset stack access
    - bpf: Refactor and streamline bounds check into helper
    - bpf: Tighten speculative pointer arithmetic mask
    - perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
    - perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[]
    - perf auxtrace: Fix potential NULL pointer dereference
    - perf map: Fix error return code in maps__clone()
    - HID: google: add don USB id
    - HID: asus: Add support for 2021 ASUS N-Key keyboard
    - HID: alps: fix error return code in alps_input_configured()
    - HID cp2112: fix support for multiple gpiochips
    - HID: wacom: Assign boolean values to a bool variable
    - soc: qcom: geni: shield geni_icc_get() for ACPI boot
    - dmaengine: xilinx: dpdma: Fix descriptor issuing on video group
    - dmaengine: xilinx: dpdma: Fix race condition in done IRQ
    - ARM: dts: Fix swapped mmc order for omap3
    - m68k: fix flatmem memory model setup
    - net: geneve: check skb is large enough for IPv4/IPv6 header
    - dmaengine: tegra20: Fix runtime PM imbalance on error
    - s390/entry: save the caller of psw_idle
    - arm64: kprobes: Restore local irqflag if kprobes is cancelled
...

Changed in linux-gcp (Ubuntu Hirsute):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package linux-gcp - 5.11.0-1008.8+21.10.1

---------------
linux-gcp (5.11.0-1008.8+21.10.1) impish; urgency=medium

  * impish/linux-gcp: 5.11.0-1008.8+21.10.1 -proposed tracker (LP: #1927565)

  * Packaging resync (LP: #1786013)
    - [Packaging] update update.conf
    - update dkms package versions

 -- Paolo Pisati <email address hidden> Thu, 20 May 2021 13:01:39 +0200

Changed in linux-gcp (Ubuntu):
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.