[LU-16178] Upstream kernel security patch to fs/ext4/namei.c breaks ext4-pdirop.patch Created: 21/Sep/22  Updated: 08/Jan/24

Status: Open
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.15.1
Fix Version/s: None

Type: Bug Priority: Major
Reporter: Brian Barbisch Assignee: WC Triage
Resolution: Unresolved Votes: 0
Labels: ubuntu
Environment:

Ubuntu 20.04
Likely other distros at some point as well


Issue Links:
Related
is related to LU-16347 Ubuntu 20.04 server ldiskfs series is... Open
is related to LU-15781 Ubuntu 22.04 LTS release support Open
Severity: 2
Rank (Obsolete): 9223372036854775807

 Description   

This Ubuntu 20.04 security-related kernel patch collides with ldiskfs patches in ext4-pdirop.patch and prevents Lustre from building:

https://kernel.ubuntu.com/git/ubuntu/ubuntu-bionic.git/commit/fs/ext4?h=master-next&id=ccdac72d6710c960ea6a194b46d65f73a37bb8ab

 

Since it is security related and pretty isolated, I imagine the other distros will eventually cherry-pick it as well (I haven't checked the other distros yet).

The upstream commit is 3ba733f879c2a88910744647e41edeefbc0d92b2



 Comments   
Comment by James A Simmons [ 21/Sep/22 ]

Which kernel (uname -r). Ubuntu 20.04 runs from 5.4 to 5.15 kernels.

Comment by Brian Barbisch [ 21/Sep/22 ]

Apologies, it looks like it is only in the bionic / 18.04 stream so far, and only in the 5.4-hwe kernel:
https://kernel.ubuntu.com/git/ubuntu/ubuntu-bionic.git/commit/fs/ext4?h=hwe-5.4&id=b3787475c8b82a0b39812379248ab7ce336b7448

 

That would be 5.4-5.4.0-126.142~18.04.1

 

It is also in master-next for 18.04 (4.15.0-194.205)
https://kernel.ubuntu.com/git/ubuntu/ubuntu-bionic.git/commit/fs/ext4?h=master-next&id=ccdac72d6710c960ea6a194b46d65f73a37bb8ab

 

So it seems like I'm premature in opening this issue for 20.04.  I imagine this change won't make it there until a future round of patches.  Up to you what you want to do with this issue in the meantime.

Comment by Brian Barbisch [ 21/Sep/22 ]

Actually, I did find it in Ubuntu 20.04 as well.  Here is the commit:

https://kernel.ubuntu.com/git/ubuntu/ubuntu-focal.git/commit/fs/ext4?h=Ubuntu-5.4.0-128.144&id=b3787475c8b82a0b39812379248ab7ce336b7448

 

That is in 5.4.0-128.144

Comment by Brian Barbisch [ 21/Sep/22 ]

I looked back and it seems like the 5.4.0-126.142 Ubuntu kernel is the first that I can find to have the commit in the Ubuntu 20.04 series (assuming I'm looking at this properly):

https://kernel.ubuntu.com/git/ubuntu/ubuntu-focal.git/commit/fs/ext4?h=Ubuntu-5.4.0-126.142&id=b3787475c8b82a0b39812379248ab7ce336b7448

Generated at Sat Feb 10 03:24:43 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.