In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to ASMEXTABLEUA() for {get,put}user() fixups During memory error injection test on kernels >= v6.4, the kernel panics like below. However, this issue couldn't be reproduced on kernels <= v6.3. mce: [Hardware Error]: CPU 296: Machine Check Exception: f Bank 1: bd80000000100134 mce: [Hardware Error]: RIP 10:<ffffffff821b9776> {_getusernocheck4+0x6/0x20} mce: [Hardware Error]: TSC 411a93533ed ADDR 346a8730040 MISC 86 mce: [Hardware Error]: PROCESSOR 0:a06d0 TIME 1706000767 SOCKET 1 APIC 211 microcode 80001490 mce: [Hardware Error]: Run the above through 'mcelog --ascii' mce: [Hardware Error]: Machine check: Data load in unrecoverable area of kernel Kernel panic - not syncing: Fatal local machine check The MCA code can recover from an in-kernel #MC if the fixup type is EXTYPEUACCESS, explicitly indicating that the kernel is attempting to access userspace memory. However, if the fixup type is EXTYPEDEFAULT the only thing that is raised for an in-kernel #MC is a panic. exhandleruaccess() would warn if users gave a non-canonical addresses (with bit 63 clear) to {get, put}user(), which was unexpected. Therefore, commit b19b74bc99b1 ("x86/mm: Rework address range check in getuser() and putuser()") replaced _ASMEXTABLEUA() with _ASMEXTABLE() for {get, put}user() fixups. However, the new fixup type EXTYPEDEFAULT results in a panic. Commit 6014bc27561f ("x86-64: make accessok() independent of LAM") added the check gpfaultaddressok() right before the WARNONCE() in exhandleruaccess() to not warn about non-canonical user addresses due to LAM. With that in place, revert back to ASMEXTABLEUA() for {get,put}user() exception fixups in order to be able to handle in-kernel MCEs correctly again. [ bp: Massage commit message. ]
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-aws-6.5-cloud-tools-6.5.0-1023" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-aws-6.5-headers-6.5.0-1023" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-aws-6.5-tools-6.5.0-1023" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-buildinfo-6.5.0-1023-aws" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-cloud-tools-6.5.0-1023-aws" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-headers-6.5.0-1023-aws" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1023-aws" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1023-aws-dbgsym" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-modules-6.5.0-1023-aws" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-modules-extra-6.5.0-1023-aws" }, { "binary_version": "6.5.0-1023.23~22.04.1", "binary_name": "linux-tools-6.5.0-1023-aws" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-azure-6.5-cloud-tools-6.5.0-1024" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-azure-6.5-headers-6.5.0-1024" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-azure-6.5-tools-6.5.0-1024" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-buildinfo-6.5.0-1024-azure" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-cloud-tools-6.5.0-1024-azure" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-headers-6.5.0-1024-azure" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1024-azure" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1024-azure-dbgsym" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-modules-6.5.0-1024-azure" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-modules-extra-6.5.0-1024-azure" }, { "binary_version": "6.5.0-1024.25~22.04.1", "binary_name": "linux-tools-6.5.0-1024-azure" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-buildinfo-6.5.0-1024-gcp" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-gcp-6.5-headers-6.5.0-1024" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-gcp-6.5-tools-6.5.0-1024" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-headers-6.5.0-1024-gcp" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1024-gcp" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1024-gcp-dbgsym" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-modules-6.5.0-1024-gcp" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-modules-extra-6.5.0-1024-gcp" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-modules-iwlwifi-6.5.0-1024-gcp" }, { "binary_version": "6.5.0-1024.26~22.04.1", "binary_name": "linux-tools-6.5.0-1024-gcp" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-buildinfo-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-buildinfo-6.5.0-44-generic-64k" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-cloud-tools-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-headers-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-headers-6.5.0-44-generic-64k" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-44" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-hwe-6.5-cloud-tools-common" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-hwe-6.5-headers-6.5.0-44" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-hwe-6.5-tools-6.5.0-44" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-hwe-6.5-tools-common" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-hwe-6.5-tools-host" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-image-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-image-6.5.0-44-generic-dbgsym" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-generic-64k" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-generic-64k-dbgsym" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-generic-dbgsym" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-modules-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-modules-6.5.0-44-generic-64k" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-modules-extra-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-modules-ipu6-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-modules-ivsc-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-modules-iwlwifi-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-source-6.5.0" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-tools-6.5.0-44-generic" }, { "binary_version": "6.5.0-44.44~22.04.1", "binary_name": "linux-tools-6.5.0-44-generic-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-buildinfo-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-buildinfo-6.5.0-44-lowlatency-64k" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-cloud-tools-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-headers-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-headers-6.5.0-44-lowlatency-64k" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-lowlatency-64k" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-lowlatency-64k-dbgsym" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-44-lowlatency-dbgsym" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-44" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-44" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-44" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-tools-common" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-lowlatency-hwe-6.5-tools-host" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-modules-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-modules-6.5.0-44-lowlatency-64k" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-modules-iwlwifi-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-tools-6.5.0-44-lowlatency" }, { "binary_version": "6.5.0-44.44.1~22.04.1", "binary_name": "linux-tools-6.5.0-44-lowlatency-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1023.24", "binary_name": "linux-buildinfo-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-buildinfo-6.5.0-1023-nvidia-64k" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-headers-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-headers-6.5.0-1023-nvidia-64k" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-image-unsigned-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-image-unsigned-6.5.0-1023-nvidia-64k" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-image-unsigned-6.5.0-1023-nvidia-64k-dbgsym" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-image-unsigned-6.5.0-1023-nvidia-dbgsym" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-modules-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-modules-6.5.0-1023-nvidia-64k" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-modules-extra-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-modules-nvidia-fs-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-modules-nvidia-fs-6.5.0-1023-nvidia-64k" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-nvidia-6.5-headers-6.5.0-1023" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-nvidia-6.5-tools-6.5.0-1023" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-nvidia-6.5-tools-host" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-tools-6.5.0-1023-nvidia" }, { "binary_version": "6.5.0-1023.24", "binary_name": "linux-tools-6.5.0-1023-nvidia-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1027.28", "binary_name": "linux-buildinfo-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-headers-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-image-unsigned-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-image-unsigned-6.5.0-1027-oem-dbgsym" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-modules-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-modules-ipu6-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-modules-ivsc-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-modules-iwlwifi-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-modules-usbio-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-oem-6.5-headers-6.5.0-1027" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-oem-6.5-lib-rust-6.5.0-1027-oem" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-oem-6.5-tools-6.5.0-1027" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-oem-6.5-tools-host" }, { "binary_version": "6.5.0-1027.28", "binary_name": "linux-tools-6.5.0-1027-oem" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-buildinfo-6.5.0-1026-oracle" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-buildinfo-6.5.0-1026-oracle-64k" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-headers-6.5.0-1026-oracle" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-headers-6.5.0-1026-oracle-64k" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1026-oracle" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1026-oracle-64k" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1026-oracle-64k-dbgsym" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-image-unsigned-6.5.0-1026-oracle-dbgsym" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-modules-6.5.0-1026-oracle" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-modules-6.5.0-1026-oracle-64k" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-modules-extra-6.5.0-1026-oracle" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-modules-extra-6.5.0-1026-oracle-64k" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-oracle-6.5-headers-6.5.0-1026" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-oracle-6.5-tools-6.5.0-1026" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-tools-6.5.0-1026-oracle" }, { "binary_version": "6.5.0-1026.26~22.04.1", "binary_name": "linux-tools-6.5.0-1026-oracle-64k" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-buildinfo-6.5.0-1017-starfive" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-headers-6.5.0-1017-starfive" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-image-6.5.0-1017-starfive" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-image-6.5.0-1017-starfive-dbgsym" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-modules-6.5.0-1017-starfive" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-modules-extra-6.5.0-1017-starfive" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-starfive-6.5-headers-6.5.0-1017" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-starfive-6.5-tools-6.5.0-1017" }, { "binary_version": "6.5.0-1017.18~22.04.1", "binary_name": "linux-tools-6.5.0-1017-starfive" } ] }
{ "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro", "binaries": [ { "binary_version": "6.8.0-2001.1", "binary_name": "linux-buildinfo-6.8.0-2001-raspi-realtime" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-headers-6.8.0-2001-raspi-realtime" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-image-6.8.0-2001-raspi-realtime" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-image-6.8.0-2001-raspi-realtime-dbgsym" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-modules-6.8.0-2001-raspi-realtime" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-raspi-realtime-headers-6.8.0-2001" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-raspi-realtime-tools-6.8.0-2001" }, { "binary_version": "6.8.0-2001.1", "binary_name": "linux-tools-6.8.0-2001-raspi-realtime" } ] }