Activity log for bug #2002226

Date Who What changed Old value New value Message
2023-01-07 22:12:00 Heinrich Schuchardt bug added bug
2023-01-19 11:06:11 Julian Andres Klode affects grub2 (Ubuntu) grub2-unsigned (Ubuntu)
2023-02-03 12:23:34 Julian Andres Klode description Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel. We should eliminate the following check: grub-core/loader/efi/linux.c:75: if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE) return grub_error(GRUB_ERR_BAD_OS, "invalid magic number"); This will allow any EFI binary to be run using the linux command. [Impact] Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel. We should eliminate the following check: grub-core/loader/efi/linux.c:75:   if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE)     return grub_error(GRUB_ERR_BAD_OS, "invalid magic number"); This will allow any EFI binary to be run using the linux command. [Test plan] TBD [Where problems could occur] TBD
2023-05-01 14:26:20 Julian Andres Klode bug task added grub2 (Ubuntu)
2023-07-17 08:11:13 Dimitri John Ledkov bug task added linux (Ubuntu)
2023-07-17 08:12:08 Dimitri John Ledkov summary Support for kernels compiled with CONFIG_EFI_ZBOOT Add support for kernels compiled with CONFIG_EFI_ZBOOT
2023-07-17 08:19:18 Dimitri John Ledkov attachment added 0001-UBUNTU-Config-Turn-on-CONFIG_EFI_ZBOOT-on-ARM64.patch https://bugs.launchpad.net/ubuntu/+source/grub2-unsigned/+bug/2002226/+attachment/5686814/+files/0001-UBUNTU-Config-Turn-on-CONFIG_EFI_ZBOOT-on-ARM64.patch
2023-07-17 08:20:01 Dimitri John Ledkov linux (Ubuntu): importance Undecided Wishlist
2023-07-17 08:20:07 Dimitri John Ledkov grub2-unsigned (Ubuntu): importance Undecided Medium
2023-07-17 08:20:09 Dimitri John Ledkov grub2 (Ubuntu): importance Undecided Medium
2023-07-17 08:20:13 Dimitri John Ledkov linux (Ubuntu): status New Triaged
2023-07-17 08:20:15 Dimitri John Ledkov grub2-unsigned (Ubuntu): status New Triaged
2023-07-17 08:20:17 Dimitri John Ledkov grub2 (Ubuntu): status New Triaged
2023-07-17 12:19:28 Ubuntu Foundations Team Bug Bot tags foundations-todo foundations-todo patch
2023-07-17 12:19:33 Ubuntu Foundations Team Bug Bot bug added subscriber Terry Rudd
2023-08-21 13:19:53 Julian Andres Klode grub2-unsigned (Ubuntu): status Triaged Fix Released
2023-08-21 13:19:55 Julian Andres Klode grub2 (Ubuntu): status Triaged Fix Released
2023-09-08 14:16:41 Dimitri John Ledkov description [Impact] Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel. We should eliminate the following check: grub-core/loader/efi/linux.c:75:   if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE)     return grub_error(GRUB_ERR_BAD_OS, "invalid magic number"); This will allow any EFI binary to be run using the linux command. [Test plan] TBD [Where problems could occur] TBD [Impact] Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel. We should eliminate the following check: grub-core/loader/efi/linux.c:75:   if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE)     return grub_error(GRUB_ERR_BAD_OS, "invalid magic number"); This will allow any EFI binary to be run using the linux command. [Test plan] * check that grub and EFI based ARM64 machines boot * check that MAAS deployment works [Where problems could occur] * Non-EFI bootloaders like still want to boot with regular vmlinuz.gz. If one is using piboot, u-boot, abootimg likely one still wants to build Image.gz and have CONFIG_EFI_ZBOOT disabled.
2023-09-08 14:16:54 Dimitri John Ledkov description [Impact] Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel. We should eliminate the following check: grub-core/loader/efi/linux.c:75:   if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE)     return grub_error(GRUB_ERR_BAD_OS, "invalid magic number"); This will allow any EFI binary to be run using the linux command. [Test plan] * check that grub and EFI based ARM64 machines boot * check that MAAS deployment works [Where problems could occur] * Non-EFI bootloaders like still want to boot with regular vmlinuz.gz. If one is using piboot, u-boot, abootimg likely one still wants to build Image.gz and have CONFIG_EFI_ZBOOT disabled. [Impact] Arm64 kernels compiled with CONFIG_EFI_ZBOOT=y don't use the ARM64_IMAGE_MAGIC ('ARM\x64') but LINUX_PE_MAGIC (0x818223cd) in the PE Header. Our GRUB fails to boot such a kernel. We should eliminate the following check: grub-core/loader/efi/linux.c:75:   if (lh->magic != GRUB_LINUX_ARCH_MAGIC_SIGNATURE)     return grub_error(GRUB_ERR_BAD_OS, "invalid magic number"); This will allow any EFI binary to be run using the linux command. [Test plan] * check that grub and EFI based ARM64 machines boot * check that MAAS deployment works [Where problems could occur] * Non-EFI bootloaders want to boot with regular vmlinuz.gz. If one is using piboot, u-boot, abootimg likely one still wants to build Image.gz and have CONFIG_EFI_ZBOOT disabled.
2023-09-25 13:15:11 Julian Andres Klode nominated for series Ubuntu Focal
2023-09-25 13:15:11 Julian Andres Klode bug task added grub2 (Ubuntu Focal)
2023-09-25 13:15:11 Julian Andres Klode bug task added linux (Ubuntu Focal)
2023-09-25 13:15:11 Julian Andres Klode bug task added grub2-unsigned (Ubuntu Focal)
2023-09-25 13:15:11 Julian Andres Klode nominated for series Ubuntu Jammy
2023-09-25 13:15:11 Julian Andres Klode bug task added grub2 (Ubuntu Jammy)
2023-09-25 13:15:11 Julian Andres Klode bug task added linux (Ubuntu Jammy)
2023-09-25 13:15:11 Julian Andres Klode bug task added grub2-unsigned (Ubuntu Jammy)
2023-09-25 13:16:21 Julian Andres Klode nominated for series Ubuntu Lunar
2023-09-25 13:16:21 Julian Andres Klode bug task added grub2 (Ubuntu Lunar)
2023-09-25 13:16:21 Julian Andres Klode bug task added linux (Ubuntu Lunar)
2023-09-25 13:16:21 Julian Andres Klode bug task added grub2-unsigned (Ubuntu Lunar)
2023-09-25 15:19:47 Mate Kukri grub2-unsigned (Ubuntu): assignee Mate Kukri (mkukri)
2023-09-25 15:34:54 Mate Kukri grub2-unsigned (Ubuntu Focal): assignee Mate Kukri (mkukri)
2023-09-27 09:18:19 Mate Kukri grub2-unsigned (Ubuntu Jammy): assignee Mate Kukri (mkukri)
2023-09-27 09:18:25 Mate Kukri grub2-unsigned (Ubuntu Lunar): assignee Mate Kukri (mkukri)
2023-09-27 11:06:43 Dimitri John Ledkov linux (Ubuntu): milestone later
2023-09-27 11:06:56 Dimitri John Ledkov linux (Ubuntu Focal): status New Invalid
2023-09-27 11:07:03 Dimitri John Ledkov linux (Ubuntu Jammy): status New Invalid
2023-09-27 11:07:10 Dimitri John Ledkov linux (Ubuntu Lunar): status New Invalid
2023-09-27 11:07:28 Dimitri John Ledkov grub2-unsigned (Ubuntu Focal): status New Invalid
2023-09-27 11:07:35 Dimitri John Ledkov grub2-unsigned (Ubuntu Jammy): status New Invalid
2023-09-27 11:07:41 Dimitri John Ledkov grub2-unsigned (Ubuntu Lunar): status New Invalid
2023-09-27 11:07:49 Dimitri John Ledkov grub2 (Ubuntu Focal): status New Invalid
2023-09-27 11:07:56 Dimitri John Ledkov grub2 (Ubuntu Jammy): status New Invalid
2023-09-27 11:08:05 Dimitri John Ledkov grub2 (Ubuntu Lunar): status New Invalid
2023-10-05 08:02:36 Launchpad Janitor linux (Ubuntu): status Triaged Fix Released
2023-10-23 15:04:43 Benjamin Drung tags foundations-todo patch patch
2023-10-24 16:46:23 Ubuntu Kernel Bot tags patch kernel-spammed-jammy-linux-azure-6.5-v2 patch verification-needed-jammy-linux-azure-6.5
2023-10-24 18:21:27 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-azure-6.5-v2 patch verification-needed-jammy-linux-azure-6.5 kernel-spammed-jammy-linux-aws-6.5-v2 kernel-spammed-jammy-linux-azure-6.5-v2 patch verification-needed-jammy-linux-aws-6.5 verification-needed-jammy-linux-azure-6.5
2024-05-14 19:47:10 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-aws-6.5-v2 kernel-spammed-jammy-linux-azure-6.5-v2 patch verification-needed-jammy-linux-aws-6.5 verification-needed-jammy-linux-azure-6.5 kernel-spammed-jammy-linux-aws-6.5-v2 kernel-spammed-jammy-linux-azure-6.5-v2 kernel-spammed-jammy-linux-nvidia-6.8-v2 patch verification-needed-jammy-linux-aws-6.5 verification-needed-jammy-linux-azure-6.5 verification-needed-jammy-linux-nvidia-6.8