Potential memory corruption with capi adapters
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
linux (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Xenial |
Fix Committed
|
Undecided
|
Unassigned | ||
Yakkety |
Fix Released
|
Undecided
|
Unassigned | ||
Zesty |
Fix Committed
|
Undecided
|
Unassigned | ||
Artful |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
== Comment: #0 - Frederic Barrat <email address hidden> - 2017-04-10 04:44:01 ==
---Problem Description---
Memory corruption can be seen when using a capi adapter. It can happen if the host process allocates/
Some TLB invalidations may not be propagated to the capi adapter, causing the corruption.
Contact Information = <email address hidden>
---uname output---
Linux garri 4.4.0-72-generic #93-Ubuntu SMP Fri Mar 31 14:05:15 UTC 2017 ppc64le ppc64le ppc64le GNU/Linux
---Additional Hardware Info---
capi card needed, with the AFU image used by libdonut development
Machine Type = Tuleta
---Debugger---
A debugger is not configured
---Steps to Reproduce---
Run libdonut in a loop, until corruption is seen. Host process will dump core
Stack trace output:
no
Oops output:
no
System Dump Info:
The system is not configured to capture a system dump.
*Additional Instructions for <email address hidden>:
-Attach sysctl -a output output to the bug.
== Comment: #1 - Frederic Barrat <email address hidden> - 2017-04-10 04:45:19 ==
Fix is already upstream:
commit 88b1bf7268f5688
Author: Frederic Barrat <email address hidden>
Date: Wed Mar 29 19:19:42 2017 +0200
powerpc/mm: Add missing global TLB invalidate if cxl is active
Could it be backported to the 16.04 LTS release, as well as 17.04? Thanks
CVE References
tags: | added: architecture-ppc64le bugnameltc-153279 severity-high targetmilestone-inin16045 |
Changed in ubuntu: | |
assignee: | nobody → Taco Screen team (taco-screen-team) |
affects: | ubuntu → linux (Ubuntu) |
tags: |
added: severity-critical removed: severity-high |
Changed in linux (Ubuntu Zesty): | |
status: | In Progress → Fix Committed |
tags: |
added: verification-done-yakkety removed: verification-needed-yakkety |
tags: | added: cscc |
Changed in linux (Ubuntu): | |
status: | Fix Committed → Fix Released |
Changed in linux (Ubuntu): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
Changed in linux (Ubuntu Xenial): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
Changed in linux (Ubuntu Yakkety): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
Changed in linux (Ubuntu Zesty): | |
assignee: | Tim Gardner (timg-tpi) → nobody |
Leann,
Critical bug to add to the Kernel Team's queue.
On 04/10/2017 07:49 AM, Launchpad Bug Tracker wrote: frees/reallocat es memory areas used by the the capi adapter. 7ca88eb09c6fb0f 4fc970121a ppc64le bugnameltc-153279 severity-high targetmilestone -inin16045
> bugproxy (bugproxy) has assigned this bug to you for Ubuntu:
>
> == Comment: #0 - Frederic Barrat <email address hidden> -
> 2017-04-10 04:44:01 ==
>
> ---Problem Description---
> Memory corruption can be seen when using a capi adapter. It can happen if the host process allocates/
> Some TLB invalidations may not be propagated to the capi adapter, causing the corruption.
>
> Contact Information = <email address hidden>
>
> ---uname output---
> Linux garri 4.4.0-72-generic #93-Ubuntu SMP Fri Mar 31 14:05:15 UTC 2017 ppc64le ppc64le ppc64le GNU/Linux
>
> ---Additional Hardware Info---
> capi card needed, with the AFU image used by libdonut development
>
>
> Machine Type = Tuleta
>
> ---Debugger---
> A debugger is not configured
>
> ---Steps to Reproduce---
> Run libdonut in a loop, until corruption is seen. Host process will dump core
>
>
> Stack trace output:
> no
>
> Oops output:
> no
>
> System Dump Info:
> The system is not configured to capture a system dump.
>
> *Additional Instructions for <email address hidden>:
> -Attach sysctl -a output output to the bug.
>
> == Comment: #1 - Frederic Barrat <email address hidden> - 2017-04-10 04:45:19 ==
> Fix is already upstream:
>
> commit 88b1bf7268f5688
> Author: Frederic Barrat <email address hidden>
> Date: Wed Mar 29 19:19:42 2017 +0200
>
> powerpc/mm: Add missing global TLB invalidate if cxl is active
>
>
> Could it be backported to the 16.04 LTS release, as well as 17.04?
> Thanks
>
> ** Affects: ubuntu
> Importance: Undecided
> Assignee: Taco Screen team (taco-screen-team)
> Status: New
>
>
> ** Tags: architecture-
--
Michael Hohnbaum
OIL Program Manager
Power (ppc64el) Development Project Manager
Canonical, Ltd.