Intel 9260/9462/9560 can't connect to 5GHz AP

Bug #1736639 reported by AceLan Kao on 2017-12-06
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux (Ubuntu)
AceLan Kao
linux-oem (Ubuntu)

Bug Description

With 1009 oem(v4.13) kernel and latest linux-firmware[1], it connect to 2.4GHz APs without any issues.
But it fails to connect 5GHz APs.

It stucks when I select a 5GHz network AP, and after timeout it
connects to another configured 2.4GHz AP.
[ 512.404139] wlp0s20f3: authenticate with 2c:36:f8:fa:ec:00
[ 512.410781] wlp0s20f3: send auth to 2c:36:f8:fa:ec:00 (try 1/3)
[ 512.449561] wlp0s20f3: authenticated
[ 512.450625] wlp0s20f3: associate with 2c:36:f8:fa:ec:00 (try 1/3)
[ 512.452010] wlp0s20f3: RX AssocResp from 2c:36:f8:fa:ec:00
(capab=0x111 status=0 aid=8)
[ 512.454501] wlp0s20f3: associated
[ 512.542439] wlp0s20f3: Limiting TX power to 27 (30 - 3) dBm as
advertised by 2c:36:f8:fa:ec:00
[ 557.685247] wlp0s20f3: deauthenticating from 2c:36:f8:fa:ec:00 by
local choice (Reason: 3=DEAUTH_LEAVING)
[ 557.695875] wlp0s20f3: failed to remove key (1, ff:ff:ff:ff:ff:ff)
from hardware (-22)

1. c4276b6 (tag: refs/tags/iwlwifi-fw-2017-11-03) iwlwifi: add firmware version 33 for new 9000 series

CVE References

AceLan Kao (acelankao) wrote :

The 2 patches can be found here, they have CC'ed stable, so they will be in artful kernel someday.


Author: Sara Sharon <email address hidden>
Date: Mon Feb 8 23:30:47 2016 +0200

    iwlwifi: mvm: mark MIC stripped MPDUs

    When RADA is active, the hardware decrypts the packets and strips off
    the MIC as it is useless after decryption. Indicate that to mac80211.

    Cc: <email address hidden> # 4.13+
    [this is needed for the 9000-series HW to work properly]
    Signed-off-by: Sara Sharon <email address hidden>
    Signed-off-by: Luca Coelho <email address hidden>

commit 9d0fc5a50a0548f8e5d61243e5e5f26d5c405aef
Author: David Spinadel <email address hidden>
Date: Mon Nov 21 17:01:25 2016 +0200

    iwlwifi: mvm: enable RX offloading with TKIP and WEP

    Set the flag that indicates that ICV was stripped on if
    this option was enabled in the HW.

    Cc: <email address hidden> # 4.13+
    [this is needed for the 9000-series HW to work properly]
    Signed-off-by: David Spinadel <email address hidden>
    Signed-off-by: Luca Coelho <email address hidden>

Timo Aaltonen (tjaalton) on 2017-12-14
Changed in linux-oem (Ubuntu):
status: New → Invalid
Changed in linux (Ubuntu Xenial):
status: New → Invalid
Changed in linux-oem (Ubuntu Xenial):
status: New → Fix Committed
AceLan Kao (acelankao) on 2018-01-16
Changed in linux (Ubuntu):
status: In Progress → Fix Released
Launchpad Janitor (janitor) wrote :
Download full text (13.4 KiB)

This bug was fixed in the package linux-oem - 4.13.0-1017.18

linux-oem (4.13.0-1017.18) xenial; urgency=low

  * linux-oem: 4.13.0-1017.18 -proposed tracker (LP: #1743418)

  * Realtek card reader - RTS5243 [VEN_10EC&DEV_5260] (LP: #1737673)
    - mmc: rtsx: fix tuning fail on gen3 PCI-Express
    - mfd: rts5249: Add support for RTS5250S power saving
    - misc: rtsx: Move Realtek Card Reader Driver to misc
    - misc: rtsx: Add support for RTS5260
    - misc: rtsx: Fix symbol clashes
    - [Config] update configs for RTSX

  * Realtek card reader power consumption issue (LP: #1743516)
    - mfd: Fix RTS5227 (and others) powermanagement

  [ Ubuntu: 4.13.0-30.33 ]

  * linux: 4.13.0-30.33 -proposed tracker (LP: #1743412)
  * Do not duplicate changelog entries assigned to more than one bug or CVE
    (LP: #1743383)
    - [Packaging] git-ubuntu-log -- handle multiple bugs/cves better
  * Unable to handle kernel NULL pointer dereference at isci_task_abort_task
    (LP: #1726519)
    - Revert "scsi: libsas: allow async aborts"
  * CVE-2017-5715 // CVE-2017-5753
    - SAUCE: x86/microcode: Extend post microcode reload to support IBPB feature
      -- repair missmerge
    - Revert "x86/svm: Add code to clear registers on VM exit"
    - kvm: vmx: Scrub hardware GPRs at VM-exit

linux-oem (4.13.0-1016.17) xenial; urgency=low

  * linux-oem: 4.13.0-1016.17 -proposed tracker (LP: #1742728)

  * Add support for Realtek Bluetooth device [0bda:b00a] (LP: #1742613)
    - SAUCE: Import Bluetooth driver for Realtek 8821CE
    - SAUCE: Make rtl8821ce-bt work with 0bda:b00a only
    - SAUCE: rtl8821ce-bt: append device ID to config filename
    - SAUCE: bluetooth: Blacklist 0bda:b00a
    - SAUCE: build ubuntu/rtl8821ce-bt for x86 only

  * Add support for Realtek WiFi device [10ec:c821] (LP: #1740231)
    - SAUCE: Import RTL8821CE driver
    - SAUCE: Add ubuntu/rtl8821ce into build script
    - SAUCE: Sync ubuntu/rtl8821ce with a new release from Realtek

  * External HDMI monitor failed to show screen on Lenovo X1 series
    (LP: #1738523)
    - SAUCE: drm/i915: Disable writing of TMDS_OE on Lenovo ThinkPad X1 series

  * Support realtek new codec alc257 in the alsa hda driver (LP: #1738911)
    - ALSA: hda/realtek - New codec support for ALC257

  * QCA Rome bluetooth can not wakeup after USB runtime suspended.
    (LP: #1737890)
    - Bluetooth: btusb: driver to enable the usb-wakeup feature

  * Intel 9260/9462/9560 can't connect to 5GHz AP (LP: #1736639)
    - iwlwifi: mvm: enable RX offloading with TKIP and WEP
    - iwlwifi: mvm: mark MIC stripped MPDUs

  * [Artful][Wyse 3040] System hang when trying to enable an offlined CPU core
    (LP: #1736393)
    - SAUCE: drm/i915:Don't set chip specific data
    - SAUCE: drm/i915: make previous commit affects Wyse 3040 only

  * Touchpad stops working after a few seconds in Lenovo ideapad 320
    (LP: #1732056)
    - pinctrl/amd: fix masking of GPIO interrupts

  [ Ubuntu: 4.13.0-29.32 ]

  * linux: 4.13.0-29.32 -proposed tracker (LP: #1742722)
  * CVE-2017-5754
    - Revert "x86/cpu: Implement CPU vulnerabilites sysfs functions"
    - Revert "sysfs/cpu: Fix typos in vulnerability documentatio...

Changed in linux-oem (Ubuntu Xenial):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.