linux-azure: make mana.ko built-in

Bug #1949357 reported by Tim Gardner
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-azure (Ubuntu)
In Progress
Medium
Tim Gardner
Focal
Fix Released
Medium
Tim Gardner
Hirsute
Fix Released
Medium
Tim Gardner
Impish
Fix Released
Medium
Tim Gardner
Jammy
In Progress
Medium
Tim Gardner

Bug Description

SRU Justification

[Impact]

The new networking module mana.ko is not included with linux-modules, rather it is packaged in linux-modules-extra. Instance types that have mana.ko as a boot dependency will not work since Azure images are not created using linux-image-extra.

[Test Plan]

Download linux-modules and check for mana.ko

[Where problems could occur]

mana.ko could go missing

CVE References

Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Focal):
status: New → In Progress
Changed in linux-azure (Ubuntu Hirsute):
status: New → In Progress
Changed in linux-azure (Ubuntu Impish):
status: New → In Progress
Changed in linux-azure (Ubuntu Jammy):
status: New → In Progress
Changed in linux-azure (Ubuntu Focal):
importance: Undecided → Medium
Changed in linux-azure (Ubuntu Hirsute):
importance: Undecided → Medium
Changed in linux-azure (Ubuntu Impish):
importance: Undecided → Medium
Changed in linux-azure (Ubuntu Jammy):
importance: Undecided → Medium
Changed in linux-azure (Ubuntu Focal):
assignee: nobody → Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Hirsute):
assignee: nobody → Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Impish):
assignee: nobody → Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Jammy):
assignee: nobody → Tim Gardner (timg-tpi)
Revision history for this message
Tim Gardner (timg-tpi) wrote :
Tim Gardner (timg-tpi)
summary: - linux-azure: Include mana.ko in linux-modules
+ linux-azure: make mana.ko built-in
Tim Gardner (timg-tpi)
Changed in linux-azure (Ubuntu Focal):
status: In Progress → Fix Committed
Changed in linux-azure (Ubuntu Hirsute):
status: In Progress → Fix Committed
Changed in linux-azure (Ubuntu Impish):
status: In Progress → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/5.4.0-1064.67 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-focal' to 'verification-done-focal'. If the problem still exists, change the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-focal
Revision history for this message
Tim Gardner (timg-tpi) wrote :

wget https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/ppa/+files/linux-buildinfo-5.4.0-1064-azure_5.4.0-1064.67_amd64.deb
dpkg -x linux-buildinfo-5.4.0-1064-azure_5.4.0-1064.67_amd64.deb .
grep CONFIG_MICROSOFT_MANA usr/lib/linux/5.4.0-1064-azure/config
CONFIG_MICROSOFT_MANA=y

tags: added: verification-done-focal
removed: verification-needed-focal
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/5.13.0-1008.9 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-impish' to 'verification-done-impish'. If the problem still exists, change the tag 'verification-needed-impish' to 'verification-failed-impish'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-impish
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/5.11.0-1022.23 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-hirsute' to 'verification-done-hirsute'. If the problem still exists, change the tag 'verification-needed-hirsute' to 'verification-failed-hirsute'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-hirsute
Revision history for this message
Tim Gardner (timg-tpi) wrote :

Microsoft tested.

tags: added: verification-done-hirsute verification-done-impish
removed: verification-needed-hirsute verification-needed-impish
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (12.6 KiB)

This bug was fixed in the package linux-azure - 5.4.0-1064.67

---------------
linux-azure (5.4.0-1064.67) focal; urgency=medium

  * focal/linux-azure: 5.4.0-1064.67 -proposed tracker (LP: #1949816)

  * Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md

  * Drivers: hv: vmbus: Fix duplicate CPU assignments within a device
    (LP: #1937078)
    - Drivers: hv: vmbus: Fix duplicate CPU assignments within a device

  * linux-azure: make mana.ko built-in (LP: #1949357)
    - [Config] CONFIG_MICROSOFT_MANA=y

  [ Ubuntu: 5.4.0-91.102 ]

  * focal/linux: 5.4.0-91.102 -proposed tracker (LP: #1949840)
  * Packaging resync (LP: #1786013)
    - [Packaging] update Ubuntu.md
    - debian/dkms-versions -- update from kernel-versions (main/2021.11.08)
  * KVM emulation failure when booting into VM crash kernel with multiple CPUs
    (LP: #1948862)
    - KVM: x86: Properly reset MMU context at vCPU RESET/INIT
  * aufs: kernel bug with apparmor and fuseblk (LP: #1948470)
    - SAUCE: aufs: bugfix, stop omitting path->mnt
  * ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164)
    - net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
  * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
    - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
  * ACL updates on OCFS2 are not revalidated (LP: #1947161)
    - ocfs2: fix remounting needed after setfacl command
  * ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351)
    - powerpc/bpf: Fix BPF_MOD when imm == 1
  * Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
    cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
    - Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
      cachefiles_read_backing_file while vmscan is active"
  * Reassign I/O Path of ConnectX-5 Port 1 before Port 2 causes NULL dereference
    (LP: #1943464)
    - s390/pci: fix leak of PCI device structure
    - s390/pci: fix use after free of zpci_dev
    - s390/pci: fix zpci_zdev_put() on reserve
  * [SRU][F] USB: serial: pl2303: add support for PL2303HXN (LP: #1948377)
    - USB: serial: pl2303: add support for PL2303HXN
    - USB: serial: pl2303: fix line-speed handling on newer chips
  * Focal update: v5.4.151 upstream stable release (LP: #1947888)
    - tty: Fix out-of-bound vmalloc access in imageblit
    - cpufreq: schedutil: Use kobject release() method to free sugov_tunables
    - cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory
    - usb: cdns3: fix race condition before setting doorbell
    - fs-verity: fix signed integer overflow with i_size near S64_MAX
    - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary
      structure field
    - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary
      structure field
    - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary
      structure field
    - scsi: ufs: Fix illegal offset in UPIU event trace
    - mac80211: fix use-after-free in CCMP/GCMP RX
    - x86/kvmclock: Move this_cpu_pvti into kvmclock.h
    - drm/amd/display: Pass PCI deviceid into DC
    - ipvs: check that ip_vs_conn_tab_bits is between 8 and 20
    - hwmon: (mlxre...

Changed in linux-azure (Ubuntu Focal):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (55.9 KiB)

This bug was fixed in the package linux-azure - 5.11.0-1022.23

---------------
linux-azure (5.11.0-1022.23) hirsute; urgency=medium

  * hirsute/linux-azure: 5.11.0-1022.23 -proposed tracker (LP: #1949789)

  * linux-azure: make mana.ko built-in (LP: #1949357)
    - [Config] CONFIG_MICROSOFT_MANA=y
    - [Config] remove mana from azure.modules

  * hirsute/linux-azure: Backport CIFS patches (LP: #1947027)
    - Revert "CIFS: Fix a potencially linear read overflow"
    - Revert "smb3: fix posix extensions mount option"
    - Revert "cifs: create sd context must be a multiple of 8"
    - Revert "smb3: rc uninitialized in one fallocate path"
    - Revert "cifs: add missing parsing of backupuid"
    - Revert "cifs: use helpers when parsing uid/gid mount options and validate
      them"
    - Revert "SMB3: fix readpage for large swap cache"
    - Revert "cifs: fix the out of range assignment to bit fields in
      parse_server_interfaces"
    - Revert "cifs: fix fallocate when trying to allocate a hole."
    - Revert "cifs: only write 64kb at a time when fallocating a small region of a
      file"
    - Revert "cifs: prevent NULL deref in cifs_compose_mount_options()"
    - Revert "cifs: Do not use the original cruid when following DFS links for
      multiuser mounts"
    - Revert "cifs: use the expiry output of dns_query to schedule next
      resolution"
    - Revert "cifs: handle reconnect of tcon when there is no cached dfs referral"
    - Revert "smb3: fix uninitialized value for port in witness protocol move"
    - Revert "cifs: fix check of dfs interlinks"
    - Revert "cifs: fix missing spinlock around update to ses->status"
    - Revert "cifs: improve fallocate emulation"
    - Revert "SMB3: incorrect file id in requests compounded with open"
    - Revert "cifs: set server->cipher_type to AES-128-CCM for SMB3.0"
    - Revert "cifs: fix memory leak in smb2_copychunk_range"
    - Revert "smb3: do not attempt multichannel to server which does not support
      it"
    - Revert "smb3: if max_channels set to more than one channel request
      multichannel"
    - Revert "smb3: when mounting with multichannel include it in requested
      capabilities"
    - Revert "smb2: fix use-after-free in smb2_ioctl_query_info()"
    - Revert "cifs: fix regression when mounting shares with prefix paths"
    - Revert "cifs: detect dead connections only when echoes are enabled."
    - Revert "cifs: fix leak in cifs_smb3_do_mount() ctx"
    - Revert "cifs: fix out-of-bound memory access when calling smb3_notify() at
      mount point"
    - Revert "cifs: Return correct error code from smb2_get_enc_key"
    - Revert "cifs: On cifs_reconnect, resolve the hostname again."
    - Revert "cifs: escape spaces in share names"
    - Revert "cifs: Silently ignore unknown oplock break handle"
    - Revert "cifs: revalidate mapping when we open files for SMB1 POSIX"
    - Revert "cifs: Adjust key sizes and key generation routines for AES256
      encryption"
    - Revert "smb3: fix cached file size problems in duplicate extents (reflink)"
    - Revert "cifs: change noisy error message to FYI"
    - Revert "cifs: ask for more credit on async read/write code paths"
    -...

Changed in linux-azure (Ubuntu Hirsute):
status: Fix Committed → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (47.5 KiB)

This bug was fixed in the package linux-azure - 5.13.0-1008.9

---------------
linux-azure (5.13.0-1008.9) impish; urgency=medium

  * impish/linux-azure: 5.13.0-1008.9 -proposed tracker (LP: #1949734)

  * linux-azure: make mana.ko built-in (LP: #1949357)
    - [Config] CONFIG_MICROSOFT_MANA=y

  [ Ubuntu: 5.13.0-22.22 ]

  * impish/linux: 5.13.0-22.22 -proposed tracker (LP: #1949740)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.11.08)
  * ebpf: bpf_redirect fails with ip6 gre interfaces (LP: #1947164)
    - net: handle ARPHRD_IP6GRE in dev_is_mac_header_xmit()
  * require CAP_NET_ADMIN to attach N_HCI ldisc (LP: #1949516)
    - Bluetooth: hci_ldisc: require CAP_NET_ADMIN to attach N_HCI ldisc
  * CVE-2021-3744 // CVE-2021-3764
    - crypto: ccp - fix resource leaks in ccp_run_aes_gcm_cmd()
  * ppc64 BPF JIT mod by 1 will not return 0 (LP: #1948351)
    - powerpc/bpf: Fix BPF_MOD when imm == 1
  * Fix Screen freeze after resume from suspend with iGPU [1002:6987]
    (LP: #1949050)
    - drm/amdgpu: reenable BACO support for 699F:C7 polaris12 SKU
    - drm/amdgpu: add missing cleanups for Polaris12 UVD/VCE on suspend
    - drm/amdgpu: Fix crash on device remove/driver unload
  * Intel I225-IT ethernet controller: igc: probe of 0000:02:00.0 failed with
    error -1 (LP: #1945576)
    - igc: Remove _I_PHY_ID checking
    - igc: Remove phy->type checking
  * Fail to detect audio output from external monitor (LP: #1948767)
    - ALSA: hda: intel: Allow repeatedly probing on codec configuration errors
  * Drop "UBUNTU: SAUCE: cachefiles: Page leaking in
    cachefiles_read_backing_file while vmscan is active" (LP: #1947709)
    - Revert "UBUNTU: SAUCE: cachefiles: Page leaking in
      cachefiles_read_backing_file while vmscan is active"
  * rtw89 kernel module for Realtek 8852 wifi is missing (LP: #1945967)
    - rtw89: add Realtek 802.11ax driver
    - rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf
    - rtw89: fix return value check in rtw89_cam_send_sec_key_cmd()
    - rtw89: remove unneeded semicolon
    - [Config] RTW89=m
  * Impish update: upstream stable patchset 2021-11-03 (LP: #1949636)
    - mm: fix uninitialized use in overcommit_policy_handler
    - usb: gadget: r8a66597: fix a loop in set_feature()
    - usb: dwc2: gadget: Fix ISOC flow for BDMA and Slave
    - usb: dwc2: gadget: Fix ISOC transfer complete handling for DDMA
    - usb: musb: tusb6010: uninitialized data in tusb_fifo_write_unaligned()
    - cifs: fix incorrect check for null pointer in header_assemble
    - xen/x86: fix PV trap handling on secondary processors
    - usb-storage: Add quirk for ScanLogic SL11R-IDE older than 2.6c
    - USB: serial: cp210x: add ID for GW Instek GDM-834x Digital Multimeter
    - USB: cdc-acm: fix minor-number release
    - Revert "USB: bcma: Add a check for devm_gpiod_get"
    - binder: make sure fd closes complete
    - staging: greybus: uart: fix tty use after free
    - Re-enable UAS for LaCie Rugged USB3-FW with fk quirk
    - usb: dwc3: core: balance phy init and exit
    - usb: core: hcd: Add support for deferring roothub registration
    - USB: s...

Changed in linux-azure (Ubuntu Impish):
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.