Activity log for bug #2032164

Date Who What changed Old value New value Message
2023-08-21 05:57:42 Chengen Du bug added bug
2023-08-21 05:58:05 Chengen Du nominated for series Ubuntu Jammy
2023-08-21 05:58:05 Chengen Du bug task added linux (Ubuntu Jammy)
2023-08-21 05:58:17 Chengen Du linux (Ubuntu Jammy): assignee Chengen Du (chengendu)
2023-08-21 07:00:17 Chengen Du linux (Ubuntu Jammy): status New In Progress
2023-08-21 13:38:01 Launchpad Janitor linux (Ubuntu): status New Confirmed
2023-08-21 13:38:06 Thobias Trevisan bug added subscriber Thobias Trevisan
2023-08-25 14:45:15 Adrien Cunin bug added subscriber Adrien Cunin
2023-09-01 08:51:14 Roxana Nicolescu linux (Ubuntu Jammy): status In Progress Fix Committed
2023-09-06 09:26:26 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-v2 verification-needed-jammy-linux
2023-09-08 01:46:55 Chengen Du tags kernel-spammed-jammy-linux-v2 verification-needed-jammy-linux kernel-spammed-jammy-linux-v2 verification-done-jammy-linux
2023-09-19 10:00:18 Stefan Bader linux (Ubuntu Jammy): importance Undecided High
2023-09-20 07:18:30 Stefan Bader linux (Ubuntu Jammy): status Fix Committed Triaged
2023-10-05 20:57:18 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-v2 verification-done-jammy-linux kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-jammy-linux-azure
2023-10-08 12:56:22 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-jammy-linux-azure kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-jammy-linux-azure verification-needed-jammy-linux-nvidia-tegra
2023-10-18 16:42:46 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-jammy-linux-azure verification-needed-jammy-linux-nvidia-tegra kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-jammy-linux-azure verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2023-10-24 05:01:44 Ubuntu Kernel Bot tags kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-jammy-linux-azure verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2023-12-08 12:29:23 Andrew Bonney bug added subscriber Andrew Bonney
2024-03-16 03:22:23 Chengen Du description [Impact] When a host that supports PKRU initiates a guest that lacks PKRU support, the flag is enabled on the guest's fpstate. This information is then passed to userspace through the vcpu ioctl KVM_GET_XSAVE. However, a problem arises when the user opts to migrate the mentioned guest to another machine that does not support PKRU. In this scenario, the new host attempts to restore the guest's fpu registers. Nevertheless, due to the absence of PKRU support on the new host, a general-protection exception takes place, leading to a guest crash. [Fix] The problem is resolved by the following upstream commit: ad856280ddea x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 Additionally, a subsequent fix tackles the migration problem stemming from the earlier commit: a1020a25e697 KVM: x86: Always enable legacy FP/SSE in allowed user XFEATURES [Test Plan] 1. Set up two machines: one with PKRU support and the other without. 2. Initiate a guest that lacks PKRU support on the machine with PKRU support. 3. Utilize libvirt to migrate the aforementioned guest to a different machine that lacks PKRU support. 4. The error emerges on the destination machine: KVM: entry failed, hardware error 0x80000021 If you're running a guest on an Intel machine without unrestricted mode support, the failure can be most likely due to the guest entering an invalid state for Intel VT. For example, the guest maybe running in big real mode which is not supported on less recent Intel processors. EAX=86cf7970 EBX=00000000 ECX=00000001 EDX=005b0036 ESI=00000087 EDI=00000087 EBP=87c03e38 ESP=87c03e18 EIP=86cf7d5e EFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 00000000 0000ffff 00009300 CS =f000 ffff0000 0000ffff 00009b00 SS =0000 00000000 0000ffff 00009300 DS =0000 00000000 0000ffff 00009300 FS =0000 00000000 0000ffff 00009300 GS =0000 00000000 0000ffff 00009300 LDT=0000 00000000 0000ffff 00008200 TR =0000 00000000 0000ffff 00008b00 GDT= 00000000 0000ffff IDT= 00000000 0000ffff CR0=60000010 CR2=00000000 CR3=00000000 CR4=00000000 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000000 Code=00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2023-07-09T03:03:14.911750Z qemu-system-x86_64: terminating on signal 15 from pid 4134 (/usr/sbin/libvirtd) 2023-07-09 03:03:15.312+0000: shutting down, reason=destroyed [Where problems could occur] The introduced commits will impact the guest migration process, potentially leading to failures and preventing the guest from operating successfully on the migration destination. [Impact] When a host that supports PKRU initiates a guest that lacks PKRU support, the flag is enabled on the guest's fpstate. This information is then passed to userspace through the vcpu ioctl KVM_GET_XSAVE. However, a problem arises when the user opts to migrate the mentioned guest to another machine that does not support PKRU. In this scenario, the new host attempts to restore the guest's fpu registers. Nevertheless, due to the absence of PKRU support on the new host, a general-protection exception takes place, leading to a guest crash. [Fix] The problem is resolved by the following upstream commit: 18164f66e6c5 x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer 8647c52e9504 KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} [Test Plan] Several scenarios need to be conducted to confirm the migration outcome. Patched kernel with PKRU -> kernel with PKRU Patched kernel with PKRU -> kernel without PKRU Patched kernel without PKRU -> kernel with PKRU Patched kernel without PKRU -> kernel without PKRU Kernel with PKRU -> patched kernel with PKRU Kernel with PKRU -> patched kernel without PKRU Kernel without PKRU -> patched kernel with PKRU Kernel without PKRU -> patched kernel without PKRU Patched kernel with PKRU -> patched kernel without PKRU Each scenarios shall succeed except "Kernel with PKRU -> patched kernel without PKRU" one. Addressing this case poses challenges because the most plausible solution is to clamp the FPU features at the destination during migration. However, upstream does not support this approach due to concerns about silently dropping features requested by userspace. This could potentially lead to other issues and violate KVM's ABI. [Where problems could occur] The introduced commits will impact the guest migration process, potentially leading to failures and preventing the guest from operating successfully on the migration destination.
2024-03-16 03:44:15 Chengen Du linux (Ubuntu Jammy): status Triaged In Progress
2024-03-22 15:50:26 Alan Baghumian bug added subscriber Alan Baghumian
2024-03-26 08:11:16 Stefan Bader linux (Ubuntu): status Confirmed Invalid
2024-03-28 11:20:13 Stefan Bader linux (Ubuntu Jammy): status In Progress Fix Committed
2024-05-07 11:34:16 Launchpad Janitor linux (Ubuntu Jammy): status Fix Committed Fix Released
2024-05-07 11:34:16 Launchpad Janitor cve linked 2023-6039
2024-05-07 11:34:16 Launchpad Janitor cve linked 2024-2201
2024-05-07 11:35:17 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-gke verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2024-05-07 11:35:51 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-gke verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2024-05-07 11:36:54 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2024-05-07 11:58:36 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2024-05-07 11:58:51 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx
2024-05-07 11:59:11 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-raspi-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx verification-needed-jammy-linux-raspi
2024-05-07 11:59:22 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-raspi-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx verification-needed-jammy-linux-raspi kernel-spammed-focal-linux-hwe-5.15-v2 kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-raspi-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-hwe-5.15 verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx verification-needed-jammy-linux-raspi
2024-05-08 12:12:30 Ubuntu Kernel Bot tags kernel-spammed-focal-linux-hwe-5.15-v2 kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-raspi-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-hwe-5.15 verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx verification-needed-jammy-linux-raspi kernel-spammed-focal-linux-hwe-5.15-v2 kernel-spammed-focal-linux-intel-iotg-5.15-v2 kernel-spammed-focal-linux-nvidia-tegra-5.15-v2 kernel-spammed-jammy-linux-aws-v2 kernel-spammed-jammy-linux-azure-v2 kernel-spammed-jammy-linux-gcp-v2 kernel-spammed-jammy-linux-gke-v2 kernel-spammed-jammy-linux-ibm-v2 kernel-spammed-jammy-linux-intel-iotg-v2 kernel-spammed-jammy-linux-nvidia-tegra-igx-v2 kernel-spammed-jammy-linux-nvidia-tegra-v2 kernel-spammed-jammy-linux-raspi-v2 kernel-spammed-jammy-linux-v2 verification-done-jammy-linux verification-needed-focal-linux-hwe-5.15 verification-needed-focal-linux-intel-iotg-5.15 verification-needed-focal-linux-nvidia-tegra-5.15 verification-needed-jammy-linux-aws verification-needed-jammy-linux-azure verification-needed-jammy-linux-gcp verification-needed-jammy-linux-gke verification-needed-jammy-linux-ibm verification-needed-jammy-linux-intel-iotg verification-needed-jammy-linux-nvidia-tegra verification-needed-jammy-linux-nvidia-tegra-igx verification-needed-jammy-linux-raspi