"TPM PCR0 differs from reconstruction" for device firmware errors - not fixed in all releases (1.3.11 in Focal for example)
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
fwupd (Ubuntu) |
Fix Released
|
Undecided
|
Unassigned | ||
Focal |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
`fwupd` has an internal logging mechanism, and during firmware updates attempts to rebuild TPM PCRs based off event logs. Unfortunately, this has known bugs in versions before 1.3.12, 1.4.7, 1.5.0.
Per their wiki on this (https:/
Starting with fwupd 1.3.8, the daemon will attempt to reconstruct the TPM PCR0 value using the firmware's TPM event log. If the calculation leads to a different value than stored in the PCR it means one of four things:
1. An error in the firmware TPM event log.
2. An error in the fwupd reconstruction of the TPM PCR0
3. A hardware failure
4. Presence of malware on the system
Upstream admits there are known bugs with the reconstruction: https:/
Focal has 1.3.11. This does NOT include the fixes for the TPM PCR0 reconstruction, and is possibly giving false information for the TPM reconstruction.
Getting 1.3.12 into Focal would be beneficial where possible as that would allow us to see whether we actually ARE having firmware updates / reconstruction issues with TPM.
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: fwupd 1.3.11-1~focal1
ProcVersionSign
Uname: Linux 5.4.0-72-generic x86_64
NonfreeKernelMo
ApportVersion: 2.20.11-
Architecture: amd64
CasperMD5CheckR
CurrentDesktop: ubuntu:GNOME
Date: Tue Apr 27 11:22:12 2021
InstallationDate: Installed on 2018-11-21 (887 days ago)
InstallationMedia: Ubuntu 18.04.1 LTS "Bionic Beaver" - Release amd64 (20180725)
ProcEnviron:
TERM=xterm-
PATH=(custom, no user)
XDG_RUNTIME_
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: fwupd
UpgradeStatus: Upgraded to focal on 2020-08-23 (246 days ago)
Changed in fwupd (Ubuntu): | |
status: | New → Fix Released |
Changed in fwupd (Ubuntu Focal): | |
status: | New → Triaged |
https:/ /bugs.launchpad .net/ubuntu/ +source/ fwupd/+ bug/1883568 is related, but 1.3.11 does NOT properly fix the TPM PCR0 calculation, per fwupd upstream.