x86/mm: Found insecure W+X mapping at address 5096e094/0xc00a0000

Bug #1770257 reported by Reinis Danne
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-hwe-edge (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

mai 09 23:09:28 RD-NC kernel: ------------[ cut here ]------------
mai 09 23:09:28 RD-NC kernel: x86/mm: Found insecure W+X mapping at address 5096e094/0xc00a0000
mai 09 23:09:28 RD-NC kernel: WARNING: CPU: 1 PID: 1 at /build/linux-hwe-edge-OzxTzo/linux-hwe-edge-4.15.0/arch/x86/mm/dump_pagetables.c:266 note_page+0x5ec/0x790
mai 09 23:09:28 RD-NC kernel: Modules linked in:
mai 09 23:09:28 RD-NC kernel: CPU: 1 PID: 1 Comm: swapper/0 Not tainted 4.15.0-15-generic #16~16.04.1-Ubuntu
mai 09 23:09:28 RD-NC kernel: Hardware name: Hewlett-Packard Compaq Mini 110c-1000/308F, BIOS 308F0 Ver. F.07 06/18/2009
mai 09 23:09:28 RD-NC kernel: EIP: note_page+0x5ec/0x790
mai 09 23:09:28 RD-NC kernel: EFLAGS: 00010282 CPU: 1
mai 09 23:09:28 RD-NC kernel: EAX: 00000041 EBX: f6a07f44 ECX: d2e31548 EDX: 00000000
mai 09 23:09:28 RD-NC kernel: ESI: 80000000 EDI: 00000000 EBP: f6a07f10 ESP: f6a07ee4
mai 09 23:09:28 RD-NC kernel: DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
mai 09 23:09:28 RD-NC kernel: CR0: 80050033 CR2: b7d6531c CR3: 12e1d000 CR4: 000006f0
mai 09 23:09:28 RD-NC kernel: Call Trace:
mai 09 23:09:28 RD-NC kernel: ptdump_walk_pgd_level_core+0x284/0x2e0
mai 09 23:09:28 RD-NC kernel: ptdump_walk_pgd_level_checkwx+0x18/0x20
mai 09 23:09:28 RD-NC kernel: mark_rodata_ro+0xf5/0x111
mai 09 23:09:28 RD-NC kernel: ? rest_init+0x90/0x90
mai 09 23:09:28 RD-NC kernel: kernel_init+0x2e/0xf0
mai 09 23:09:28 RD-NC kernel: ret_from_fork+0x19/0x38
mai 09 23:09:28 RD-NC kernel: Code: fa ff ff 83 c2 0c c7 43 18 00 00 00 00 89 53 14 e9 1a fd ff ff 8b 43 0c c6 05 a6 28 cc d2 01 50 50 68 d8 f6 ae d2 e8 f4 73 00 00 <0f> 0b 83 c4 0c e9 74 fa ff ff ff 72 10 68 cc f5 ae d2 e8 cc 4d
mai 09 23:09:28 RD-NC kernel: ---[ end trace caa86690bc0b7b17 ]---
mai 09 23:09:28 RD-NC kernel: x86/mm: Checked W+X mappings: FAILED, 96 W+X pages found.

And for linux-hwe-4.13.0 (not sure if it is the same issue):
mai 09 21:30:58 RD-NC kernel: ------------[ cut here ]------------
mai 09 21:30:58 RD-NC kernel: WARNING: CPU: 1 PID: 0 at /build/linux-hwe-NK5GZt/linux-hwe-4.13.0/arch/x86/mm/tlb.c:361 initialize_tlbstate_and_flush+0x158/0x160
mai 09 21:30:58 RD-NC kernel: Modules linked in:
mai 09 21:30:58 RD-NC kernel: CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.13.0-41-generic #46~16.04.1-Ubuntu
mai 09 21:30:58 RD-NC kernel: Hardware name: Hewlett-Packard Compaq Mini 110c-1000/308F, BIOS 308F0 Ver. F.07 06/18/2009
mai 09 21:30:58 RD-NC kernel: task: f6a0f500 task.stack: f6a2c000
mai 09 21:30:58 RD-NC kernel: EIP: initialize_tlbstate_and_flush+0x158/0x160
mai 09 21:30:58 RD-NC kernel: EFLAGS: 00210006 CPU: 1
mai 09 21:30:58 RD-NC kernel: EAX: 0cba1000 EBX: ccbe0d00 ECX: ccbe0e88 EDX: 0cda7000
mai 09 21:30:58 RD-NC kernel: ESI: f6a0f500 EDI: ccda7000 EBP: f6a2df54 ESP: f6a2df40
mai 09 21:30:58 RD-NC kernel: DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068
mai 09 21:30:58 RD-NC kernel: CR0: 80050033 CR2: 00000000 CR3: 0cba1000 CR4: 000006b0
mai 09 21:30:58 RD-NC kernel: Call Trace:
mai 09 21:30:58 RD-NC kernel: cpu_init+0xc9/0x280
mai 09 21:30:58 RD-NC kernel: start_secondary+0x24/0x1c0
mai 09 21:30:58 RD-NC kernel: startup_32_smp+0x16b/0x170
mai 09 21:30:58 RD-NC kernel: ? startup_32_smp+0x16b/0x170
mai 09 21:30:58 RD-NC kernel: Code: d8 cc c7 00 00 00 00 00 c7 40 04 00 00 00 00 89 c8 50 9d 8d 74 26 00 83 c3 10 39 de 75 cd 83 c4 08 5b 5e 5f 5d c3 90 8d 74 26 00 <0f> ff e9 dd fe ff ff 90 3e 8d 74 26 00 55 89 e5 57 56 53 83 ec
mai 09 21:30:58 RD-NC kernel: ---[ end trace ed2f75d938020e52 ]---

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: linux-image-4.15.0-15-generic 4.15.0-15.16~16.04.1
ProcVersionSignature: Ubuntu 4.15.0-15.16~16.04.1-generic 4.15.15
Uname: Linux 4.15.0-15-generic i686
ApportVersion: 2.20.1-0ubuntu2.16
Architecture: i386
CurrentDesktop: Unity
Date: Wed May 9 23:17:32 2018
InstallationDate: Installed on 2010-01-08 (3043 days ago)
InstallationMedia: Ubuntu-Netbook-Remix 9.10 "Karmic Koala" - Release i386 (20091028.4)
SourcePackage: linux-hwe-edge
UpgradeStatus: Upgraded to xenial on 2018-05-09 (0 days ago)

Revision history for this message
Reinis Danne (readan2) wrote :
Revision history for this message
Po-Hsu Lin (cypressyew) wrote :

Hello,

can you still reproduce this now with the latest kernel? (If yes, please attach the "lsb_release -a ; uname -a" output from a terminal here)

Thanks

Changed in linux-hwe-edge (Ubuntu):
status: New → Incomplete
Revision history for this message
Reinis Danne (readan2) wrote :
Download full text (3.9 KiB)

I don't see it anymore.

~$ lsb_release -a && uname -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.2 LTS
Release: 18.04
Codename: bionic
Linux RD-NC 4.15.0-47-generic #50-Ubuntu SMP Wed Mar 13 10:40:37 UTC 2019 i686 i686 i686 GNU/Linux

The only suspect thing in the journal might be this failed resource sanity check:

apr 03 00:35:10 RD-NC kernel: Write protecting the kernel text: 8844k
apr 03 00:35:10 RD-NC kernel: Write protecting the kernel read-only data: 3484k
apr 03 00:35:10 RD-NC kernel: NX-protecting the kernel data: 7540k
apr 03 00:35:10 RD-NC kernel: x86/mm: PCI BIOS W+X mapping 96 pages
apr 03 00:35:10 RD-NC kernel: x86/mm: Checked W+X mappings: passed, no W+X pages found.
apr 03 00:35:10 RD-NC kernel: random: systemd-udevd: uninitialized urandom read (16 bytes read)
apr 03 00:35:10 RD-NC kernel: random: systemd-udevd: uninitialized urandom read (16 bytes read)
apr 03 00:35:10 RD-NC kernel: random: systemd-udevd: uninitialized urandom read (16 bytes read)
apr 03 00:35:10 RD-NC kernel: usb 1-4: New USB device found, idVendor=10f1, idProduct=1a0f
apr 03 00:35:10 RD-NC kernel: usb 1-4: New USB device strings: Mfr=2, Product=1, SerialNumber=0
apr 03 00:35:10 RD-NC kernel: usb 1-4: Product: Webcam-101
apr 03 00:35:10 RD-NC kernel: usb 1-4: Manufacturer: importek
apr 03 00:35:10 RD-NC kernel: ACPI: Video Device [IGD] (multi-head: yes rom: no post: no)
apr 03 00:35:10 RD-NC kernel: input: Video Bus as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A08:00/LNXVIDEO:00/input/input9
apr 03 00:35:10 RD-NC kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x1701db4419a, max_idle_ns: 440795259008 ns
apr 03 00:35:10 RD-NC kernel: ssb: Found chip with id 0x4312, rev 0x01 and package 0x00
apr 03 00:35:10 RD-NC kernel: ssb: Core 0 found: ChipCommon (cc 0x800, rev 0x16, vendor 0x4243)
apr 03 00:35:10 RD-NC kernel: ssb: Core 1 found: IEEE 802.11 (cc 0x812, rev 0x0F, vendor 0x4243)
apr 03 00:35:10 RD-NC kernel: ssb: Core 2 found: PCMCIA (cc 0x80D, rev 0x0A, vendor 0x4243)
apr 03 00:35:10 RD-NC kernel: ssb: Core 3 found: PCI-E (cc 0x820, rev 0x09, vendor 0x4243)
apr 03 00:35:10 RD-NC kernel: atl1c 0000:02:00.0: version 1.0.1.1-NAPI
apr 03 00:35:10 RD-NC kernel: ssb: Sonics Silicon Backplane found on PCI device 0000:01:00.0

apr 03 00:35:10 RD-NC kernel: pci 0000:00:00.0: Intel 945GME Chipset
apr 03 00:35:10 RD-NC kernel: pci 0000:00:00.0: detected gtt size: 262144K total, 262144K mappable
apr 03 00:35:10 RD-NC kernel: pci 0000:00:00.0: detected 8192K stolen memory
apr 03 00:35:10 RD-NC kernel: [drm] Memory usable by graphics device = 256M
apr 03 00:35:10 RD-NC kernel: checking generic (d0000000 240000) vs hw (d0000000 10000000)
apr 03 00:35:10 RD-NC kernel: fb: switching to inteldrmfb from VESA VGA
apr 03 00:35:10 RD-NC kernel: Console: switching to colour dummy device 80x25
apr 03 00:35:10 RD-NC kernel: [drm] Replacing VGA console driver
apr 03 00:35:10 RD-NC kernel: [drm] Supports vblank timestamp caching Rev 2 (21.10.2013).
apr 03 00:35:10 RD-NC kernel: [drm] Driver supports precise vblank timestamp query.
apr 03 00:35:10 RD-NC kernel: resource sanity check: requesting [mem 0x000c0000-0x000dffff], which spans m...

Read more...

Revision history for this message
Po-Hsu Lin (cypressyew) wrote :

Hello,
thanks for the feedback.
Please feel free to open a new bug report if you have encountered any issue.

Changed in linux-hwe-edge (Ubuntu):
status: Incomplete → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.