Comment 2 for bug 2029211

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kernel (master)

Reviewed: https://review.opendev.org/c/starlingx/kernel/+/895943
Committed: https://opendev.org/starlingx/kernel/commit/825266d5ac65dd181e7de3eb142eb975d2f17d29
Submitter: "Zuul (22348)"
Branch: master

commit 825266d5ac65dd181e7de3eb142eb975d2f17d29
Author: Peng Zhang <email address hidden>
Date: Sat Sep 23 01:17:16 2023 +0800

    Update kernel to v5.10.189

    This commit updates kernel to 5.10.189 to fix following CVE issue:
    CVE-2023-4132: https://nvd.nist.gov/vuln/detail/CVE-2023-4132
    CVE-2023-4004: https://nvd.nist.gov/vuln/detail/CVE-2023-4004
    CVE-2023-20593: https://nvd.nist.gov/vuln/detail/CVE-2023-20593
    CVE-2023-3863: https://nvd.nist.gov/vuln/detail/CVE-2023-3863
    CVE-2023-31248: https://nvd.nist.gov/vuln/detail/CVE-2023-31248
    CVE-2023-35001: https://nvd.nist.gov/vuln/detail/CVE-2023-35001
    CVE-2023-3117: https://nvd.nist.gov/vuln/detail/CVE-2023-3117
    CVE-2023-3611: https://nvd.nist.gov/vuln/detail/CVE-2023-3611
    CVE-2023-3610: https://nvd.nist.gov/vuln/detail/CVE-2023-3610
    CVE-2023-3776: https://nvd.nist.gov/vuln/detail/CVE-2023-3776
    CVE-2023-3390: https://nvd.nist.gov/vuln/detail/CVE-2023-3390
    CVE-2023-2898: https://nvd.nist.gov/vuln/detail/CVE-2023-2898

    One of our source patches requires refresh against the new kernel
    source. It was modified for missed parameter need be added in the
    new kernel:
           Port-negative-dentries-limit-feature-from-3.10.patch.

    After upgrading kernel, new function eth_hw_addr_set was added in
    linux-headers-5.10.0-6-common. While it has already defined in the
    following driver modules:
            i40e,i40e-cvl-4.10,iavf,iavf-cvl-4.10,ice,ice-cvl-4.10.
    To avoid the redefinition conflict, we allow the out-of-tree drivers
    to use the newly added in-tree version of the eth_hw_addr_set
    function. This is achieved by undefining the NEED_ETH_HW_ADDR_SET
    macro.

    Verification:
    - Build kernel and out of tree modules success for rt and std.
    - Build iso success for rt and std.
    - Install success onto a AIO-DX lab with rt kernel.
    - Boot up successfully in the lab.
    - The sanity testing was done by our test team and no regression
      defect was found.
    - The cyclictest benchmark was also run on the starlingx lab, the
      result is "samples: 259199999 avg: 1633 max: 8817 99.9999th
      percentile: 7612 overflows: 0", It is not big difference with
      5.10.185 for avg and max.

    Closes-Bug: 2029211

    Change-Id: I107a0c0285ad2de39d56863cc5fed6273ad7fbd4
    Signed-off-by: Peng Zhang <email address hidden>