Ubuntu
linux-azure package

kernel panic was caused by a fatal exception due to a null pointer dereference in the iptable_nat module

  1. Noble (24.04)
  2. Bug #2076291
Bug #2076291 reported by John Cabaj
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
linux-azure (Ubuntu)
Status tracked in Oracular
Jammy
Fix Committed
Undecided
Unassigned
Noble
Fix Committed
Undecided
Unassigned
Oracular
Fix Committed
Undecided
Unassigned

Bug Description

[Impact]

* Microsoft has requested a patch to address a kernel panic issue similar to the upstream issue here - https://patchwork<email address hidden>/

[Fix]

* Clean cherry-pick upstream commit 5830aa863981: "netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init()"

[Test Plan]

* Build and boot tested

[Where problems could occur]

* Low regression risk, mostly shifting logic
* Change to order of register_pernet_subsys() and xt_register_template() could expose some other logic being held together under race condition

[Other info]

* SF #00391736

See original description
John Cabaj (john-cabaj)
summary: kernel panic was caused by a fatal exception due to a null pointer
- dereference in the iptable_nat module Case Team (4) Case Time
- Cards (5) Open Activities (0) Activity History (0) Files (0) Case
- History (10+) SurveyMonkey Responses (0) Emails (0) Case Status History
- (5) Case Reviews (0) Case Comments (0) Notes (0) Tabs Details
- Contacts Comments Files Related Knowledge Tracking
- Assets Account Cases Case Action Plan and Engineering Notes Action
- Plan Engineering Notes Post New Case Time Card Share an
- update... I've provided a test kernel To link to a record, enter /
- then start typing the record name. To Canonical Ltd. Only Case
- Case Details Time Spent (Minutes) Solution Sent Tick Solution Sent
- Tick Status Waiting on Customer Workaround Sent Tick Workaround
- Sent Tick Most Recent Activity All Updates Emails Private
- Answers Call Logs Text Posts Status Changes Skip Feed View
- This Post Click to collapse post Melissa Carlson Melissa Carlson August
- 7, 2024 at 1:58 PM Post To: Internal Kernel Escalation Hi John, 
- Azure is requesting to pull in the following upstream patch to address
- an issue they're seeing on AKS:
- https://patchwork.kernel.org/project/netdevbpf/patch/20240731213046.6194-2-pablo@netfilter.org/
- Based on this coming from AKS I would expect we'll want to evaluate
- pulling this in for 5.15+ but I've asked Jack to confirm. Let us
- know if you see any concerns with pulling this patch in. -Melissa
- This content is a preview of a link. patchwork.kernel.org
- patchwork.kernel.org
- https://patchwork.kernel.org/project/netdevbpf/patch/20240731213046.6194-2-pablo@netfilter.org/
- Comment Click to expand post System System August 7, 2024 at 12:39 PM
- Case Case updated View This Post Click to collapse post Melissa Carlson
- Melissa Carlson August 7, 2024 at 1:38 PM Post To: All
+ dereference in the iptable_nat module
John Cabaj (john-cabaj)
description: updated
John Cabaj (john-cabaj)
Changed in linux-azure (Ubuntu Jammy):
status: New → Fix Committed
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the linux-azure/5.15.0-1072.81 kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-jammy-linux-azure' to 'verification-done-jammy-linux-azure'. If the problem still exists, change the tag 'verification-needed-jammy-linux-azure' to 'verification-failed-jammy-linux-azure'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: kernel-spammed-jammy-linux-azure-v2 verification-needed-jammy-linux-azure
John Cabaj (john-cabaj)
Changed in linux-azure (Ubuntu Noble):
status: New → Fix Committed
Changed in linux-azure (Ubuntu Oracular):
status: New → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.