linux-image-5.4.0-1024-fips - boots to kernel panic on AMD EPYC 7262 CPU - drbg_nopr_sha512
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Fix Released
|
Undecided
|
gerald.yang |
Bug Description
On a stock/default installation of Ubuntu 20.04.6LTS with Ubuntu Pro activated, running pro enable fips on a system with an AMD EPYC 7262 results in a kernel panic during boot. Issue not reproducible on Intel processors.
Kernel panic - not syncing: random: Failed to reset DRBG (drbg_nopr_sha512): -2
Will include full screenshot of kernel panic as an attachment to this report.
How the system was built:
Hardware: HPE Proliant DL385Gen10 with an EPYC 7262 processor, running VMware ESXi 7.0u3.
Using the latest ISO ubuntu-
Once the setup is completed and the system reboots into the newly installed system, I run apt-get update, apt-get upgrade, apt-get dist-upgrade, to apply all updates and reboot.
Then, I run: pro enable fips, press Y to confirm the installation, and reboot once it says to reboot to apply FIPS settings.
System boots into kernel panic.
Editing grub entry for the same kernel to change fips=1 to fips=0 bypasses the kernel panic and allows the system to boot normally.
affects: | ubuntu → linux (Ubuntu) |
tags: | added: focal |
Changed in linux (Ubuntu): | |
assignee: | nobody → gerald.yang (gerald-yang-tw) |
status: | New → In Progress |
attached version.log