Skip to content

Add linux 5.10.47 #2163

Merged
merged 4 commits into from
Jul 1, 2021
Merged

Add linux 5.10.47 #2163

merged 4 commits into from
Jul 1, 2021

Conversation

donald
Copy link
Collaborator

@donald donald commented Jul 1, 2021

Latest 5.10 LZT release.

Our current 5.10 kernel ( 5.10.22 and 5.10.24 ) are both vulnerable to an attack from within a kvm guest on amd cpus 1. The bug is fixed in 5.10.28. As we allow our users to use kvm based virtualization ( /dev/kvm is 0666) we should fix that. The risk is not very high, because only our internal users could abuse that and the published exploit needed to be updated to our environment. Anyway, go for latest and greatest.

Create bee file with

    cp linux-5.10.24-375.bee linux-5.10.47-390.bee
Update patches to new revisions, which apply cleanly. No functional
changes.
Resolves #2150

According to [1] the following parameters are required: VIRTIO,
VIRTIO_FS, DAX, FS_DAX, DAX_DRIVER, ZONE_DEVICE.

VIRTIO is already selected (as y) by the existing VIRTIO_PCI (=y).

Set VIRTIO_FS.

DAX is selected by DAX_DRIVER and DAX_DRIVER is selected by BLK_DEV_PMEM
&& LIBNVDIMM.  BLK_DEV_PMEM ist default LIBNVDIMM. Set LIBNVDIMM.

Set FS_DAX.

DAX_DRIVER is already selected by BLK_DEV_PMEM and LIBNVDIMM.

ZONE_DEVICE depends on MEMORY_HOTPLUG and MEMORY_HOTREMOVE. Set all three.

[1]: https://virtio-fs.gitlab.io/howto-qemu.html
Create bee file with

    cp nvidia_linux-5.10.24-375-460.39-0.bee nvidia_linux-5.10.47-390-460.39-0.bee
@thomas
Copy link
Collaborator

thomas commented Jul 1, 2021

LGTM

@donald
Copy link
Collaborator Author

donald commented Jul 1, 2021

Needs to be tested on a nvidia-workstation.

@thomas
Copy link
Collaborator

thomas commented Jul 1, 2021

On sigill: Blender, rstudio, stellarium work as usual.

@donald
Copy link
Collaborator Author

donald commented Jul 1, 2021

Thanks a lot.... I'll go for claptrap then.... :-)

@donald donald merged commit 15af243 into master Jul 1, 2021
Sign in to join this conversation on GitHub.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants