Bug:
=================================================================================================
Command: sudo fwts uefirttime
System: Dell Inc. OptiPlex 790/0D28YY
FTWS Versions Tested: fwts-live-16.09.00.img (failed) fwts 16.03.00 installed on ubuntu 16.04 server ran from usb installed via apt (failed)
Bios Versions Tested: A14, A18(latest) Failed with both
Results: Kernel terminates FWTS violently... Afterwords the kernel is unstable and will fail to shutdown in "strange" ways. Suspected damage to kernel data structures caused by efi_runtime.ko.
Full results.log:
=================================================================================================
Results generated by fwts: Version V16.03.00 (2016-03-14 09:10:20).
Some of this work - Copyright (c) 1999 - 2016, Intel Corp. All rights reserved.
Some of this work - Copyright (c) 2010 - 2016, Canonical.
This test run on 19/10/16 at 12:33:39 on host Linux thumbstick 4.4.0-43-generic
#63-Ubuntu SMP Wed Oct 12 13:48:03 UTC 2016 x86_64.
uefirttime: UEFI Runtime service time interface tests.
--------------------------------------------------------------------------------
Test 1 of 35: Test UEFI RT service get time interface.
=================================================================================================
Bug: ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ====== 16.09.00. img (failed)
fwts 16.03.00 installed on ubuntu 16.04 server ran from usb installed via apt (failed)
=======
Command: sudo fwts uefirttime
System: Dell Inc. OptiPlex 790/0D28YY
FTWS Versions Tested: fwts-live-
Bios Versions Tested: A14, A18(latest) Failed with both
Results: Kernel terminates FWTS violently... Afterwords the kernel is unstable and will fail to shutdown in "strange" ways. Suspected damage to kernel data structures caused by efi_runtime.ko.
Full results.log: ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======
=======
Results generated by fwts: Version V16.03.00 (2016-03-14 09:10:20).
Some of this work - Copyright (c) 1999 - 2016, Intel Corp. All rights reserved.
Some of this work - Copyright (c) 2010 - 2016, Canonical.
This test run on 19/10/16 at 12:33:39 on host Linux thumbstick 4.4.0-43-generic
#63-Ubuntu SMP Wed Oct 12 13:48:03 UTC 2016 x86_64.
Command: "fwts uefirttime".
Running tests: uefirttime.
uefirttime: UEFI Runtime service time interface tests. ------- ------- ------- ------- ------- ------- ------- ------- ------- ------- --- ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======
-------
Test 1 of 35: Test UEFI RT service get time interface.
=======
Klog excerpt: (full log in attachments) ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ====== 5ff>] 0xd8b65ff temp_thermal intel_powerclamp coretemp kvm_intel snd_hda_ codec_realtek snd_hda_ codec_generic kvm snd_hda_intel snd_hda_codec snd_hda_core dcdbas snd_hwdep irqbypass snd_pcm snd_timer snd soundcore joydev serio_raw input_leds mei_me mei shpchp 8250_fintek lpc_ich parport_pc parport mac_hid ib_iser rdma_cm iw_cm ib_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp libiscsi_tcp libiscsi scsi_transport_ iscsi autofs4 btrfs raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid0 multipath linear raid1 hid_generic usbhid hid uas usb_storage nouveau crct10dif_pclmul crc32_pclmul mxm_wmi aesni_intel wmi aes_x86_64 i2c_algo_bit lrw gf128mul ttm glue_helper ablk_helper drm_kms_helper cryptd syscopyarea e1000e sysfillrect sysimgblt fb_sys_fops ahci ptp psmouse drm libahci pps_core fjes video 000000000d8b65f f>] [<000000000d8b6 5ff>] 0xd8b65ff defcb8 EFLAGS: 00010086 0(0000) GS:ffff88012920 0000(0000) knlGS:000000000 0000000 eee>] ? efi_call+0x7e/0x100 243>] ? virt_efi_ get_time+ 0x53/0x90 b18>] efi_runtime_ ioctl+0xa78/ 0xfd6 [efi_runtime] 951>] ? handle_ mm_fault+ 0x1131/ 0x1820 23f>] do_vfs_ ioctl+0x29f/ 0x490 504>] ? __do_page_ fault+0x1b4/ 0x400 4a9>] SyS_ioctl+0x79/0x90 8b2>] entry_SYSCALL_ 64_fastpath+ 0x16/0x71 5ff>] 0xd8b65ff ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======= ======
=======
Oct 19 12:33:39 thumbstick kernel: [ 215.931359] EFI_RUNTIME Driver v0.1
Oct 19 12:33:39 thumbstick kernel: [ 215.931895] kernel tried to execute NX-protected page - exploit attempt? (uid: 0)
Oct 19 12:33:39 thumbstick kernel: [ 215.932226] BUG: unable to handle kernel paging request at 000000000d8b65ff
Oct 19 12:33:39 thumbstick kernel: [ 215.932558] IP: [<000000000d8b6
Oct 19 12:33:39 thumbstick kernel: [ 215.933258] PGD 3201067 PUD 3202067 PMD 800000000d8001e3
Oct 19 12:33:39 thumbstick kernel: [ 215.933958] Oops: 0011 [#1] SMP
Oct 19 12:33:39 thumbstick kernel: [ 215.934649] Modules linked in: efi_runtime(OE) nls_iso8859_1 snd_hda_codec_hdmi intel_rapl ppdev x86_pkg_
Oct 19 12:33:39 thumbstick kernel: [ 215.939521] CPU: 0 PID: 7181 Comm: fwts Tainted: G OE 4.4.0-43-generic #63-Ubuntu
Oct 19 12:33:39 thumbstick kernel: [ 215.940383] Hardware name: Dell Inc. OptiPlex 790/0D28YY, BIOS A18 09/24/2013
Oct 19 12:33:39 thumbstick kernel: [ 215.941247] task: ffff8800c4a7d280 ti: ffff880127dec000 task.ti: ffff880127dec000
Oct 19 12:33:39 thumbstick kernel: [ 215.942123] RIP: 0010:[<
Oct 19 12:33:39 thumbstick kernel: [ 215.942998] RSP: 0018:ffff880127
Oct 19 12:33:39 thumbstick kernel: [ 215.943875] RAX: 00000000ccae3e18 RBX: ffff880127defe00 RCX: 00000000ccae3e18
Oct 19 12:33:39 thumbstick kernel: [ 215.944755] RDX: ffff880127defe00 RSI: ffff880127defe00 RDI: ffff880127defdf0
Oct 19 12:33:39 thumbstick kernel: [ 215.945637] RBP: ffff880127defdb0 R08: 0000000000000000 R09: 00007f93ad186770
Oct 19 12:33:39 thumbstick kernel: [ 215.946520] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000202
Oct 19 12:33:39 thumbstick kernel: [ 215.947401] R13: ffff880127defdf0 R14: 0000000080187003 R15: 0000000000097000
Oct 19 12:33:39 thumbstick kernel: [ 215.948284] FS: 00007f93adffe80
Oct 19 12:33:39 thumbstick kernel: [ 215.949175] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Oct 19 12:33:39 thumbstick kernel: [ 215.950055] CR2: 000000000d8b65ff CR3: 0000000000097000 CR4: 00000000000406f0
Oct 19 12:33:39 thumbstick kernel: [ 215.950946] Stack:
Oct 19 12:33:39 thumbstick kernel: [ 215.951829] fffffffeffb83350 ffff8800cce8b360 000003f000000000 000003f000000000
Oct 19 12:33:39 thumbstick kernel: [ 215.952732] 0000001000000008 fffffffeffb83330 ffffffff81079eee ffff880127defe00
Oct 19 12:33:39 thumbstick kernel: [ 215.953643] 000000000000009e ffff00000000002d 07000000ffffff00 00007f93adffe800
Oct 19 12:33:39 thumbstick kernel: [ 215.954554] Call Trace:
Oct 19 12:33:39 thumbstick kernel: [ 215.955464] [<ffffffff81079
Oct 19 12:33:39 thumbstick kernel: [ 215.956370] [<ffffffff816de
Oct 19 12:33:39 thumbstick kernel: [ 215.957279] [<ffffffffc0750
Oct 19 12:33:39 thumbstick kernel: [ 215.958194] [<ffffffff811c0
Oct 19 12:33:39 thumbstick kernel: [ 215.959104] [<ffffffff81221
Oct 19 12:33:39 thumbstick kernel: [ 215.960007] [<ffffffff8106b
Oct 19 12:33:39 thumbstick kernel: [ 215.960912] [<ffffffff81221
Oct 19 12:33:39 thumbstick kernel: [ 215.961813] [<ffffffff81831
Oct 19 12:33:39 thumbstick kernel: [ 215.962707] Code: Bad RIP value.
Oct 19 12:33:39 thumbstick kernel: [ 215.963602] RIP [<000000000d8b6
Oct 19 12:33:39 thumbstick kernel: [ 215.964502] RSP <ffff880127defcb8>
Oct 19 12:33:39 thumbstick kernel: [ 215.965408] CR2: 000000000d8b65ff
Oct 19 12:33:39 thumbstick kernel: [ 215.966307] ---[ end trace 4747c7a70ae4b098 ]---
=======