| 2019-08-16 16:57:52 |
Tyler Hicks |
bug |
|
|
added bug |
| 2019-08-16 16:58:29 |
Tyler Hicks |
nominated for series |
|
Ubuntu Bionic |
|
| 2019-08-16 16:58:29 |
Tyler Hicks |
bug task added |
|
linux-aws (Ubuntu Bionic) |
|
| 2019-08-16 16:58:29 |
Tyler Hicks |
nominated for series |
|
Ubuntu Eoan |
|
| 2019-08-16 16:58:29 |
Tyler Hicks |
bug task added |
|
linux-aws (Ubuntu Eoan) |
|
| 2019-08-16 16:58:29 |
Tyler Hicks |
nominated for series |
|
Ubuntu Disco |
|
| 2019-08-16 16:58:29 |
Tyler Hicks |
bug task added |
|
linux-aws (Ubuntu Disco) |
|
| 2019-08-16 16:58:55 |
Tyler Hicks |
linux-aws (Ubuntu Disco): status |
New |
Triaged |
|
| 2019-08-16 16:58:57 |
Tyler Hicks |
linux-aws (Ubuntu Bionic): status |
New |
Triaged |
|
| 2019-08-16 17:00:12 |
Tyler Hicks |
description |
[Impact]
Some cloud-focused kernels have CONFIG_BT enabled but cloud instances shouldn't need bluetooth support. Disabling the bluetooth subsystem reduces the amount of security-sensitive code we have to worry about in the cloud kernels and also has the nice side effect of minimizing build times and kernel sizes.
[Test Case]
1. Install patched kernel and reboot into it
2. Ensure that the following command does NOT display any output:
$ grep CONFIG_BT=[my] /boot/config-$(uname -r)
[Regression Potential]
There could be an unexpected dependence on bluetooth within one of the clouds but I think it is highly unlikely. |
[Impact]
Some cloud-focused kernels have CONFIG_BT enabled but cloud instances shouldn't need bluetooth support. Disabling the bluetooth subsystem reduces the amount of security-sensitive code we have to worry about in the cloud kernels and also has the nice side effect of minimizing build times and kernel sizes.
The cloud kernels known to have bluetooth enabled include:
* [B/D/E] linux-aws (arm64 only)
[Test Case]
1. Install patched kernel and reboot into it
2. Ensure that the following command does NOT display any output:
$ grep CONFIG_BT=[my] /boot/config-$(uname -r)
[Regression Potential]
There could be an unexpected dependence on bluetooth within one of the clouds but I think it is highly unlikely. |
|
| 2019-08-16 17:00:31 |
Tyler Hicks |
bug task added |
|
linux-gcp (Ubuntu) |
|
| 2019-08-16 17:00:58 |
Tyler Hicks |
nominated for series |
|
Ubuntu Xenial |
|
| 2019-08-16 17:00:58 |
Tyler Hicks |
bug task added |
|
linux-aws (Ubuntu Xenial) |
|
| 2019-08-16 17:00:58 |
Tyler Hicks |
bug task added |
|
linux-gcp (Ubuntu Xenial) |
|
| 2019-08-16 17:01:16 |
Tyler Hicks |
linux-aws (Ubuntu Xenial): status |
New |
Invalid |
|
| 2019-08-16 17:03:28 |
Tyler Hicks |
bug task added |
|
linux-gke-4.15 (Ubuntu) |
|
| 2019-08-16 17:03:39 |
Tyler Hicks |
bug task added |
|
linux-gke-5.0 (Ubuntu) |
|
| 2019-08-16 17:04:43 |
Tyler Hicks |
linux-gke-4.15 (Ubuntu Xenial): status |
New |
Invalid |
|
| 2019-08-16 17:04:55 |
Tyler Hicks |
linux-gke-4.15 (Ubuntu Disco): status |
New |
Invalid |
|
| 2019-08-16 17:05:31 |
Tyler Hicks |
linux-gke-4.15 (Ubuntu Eoan): status |
New |
Invalid |
|
| 2019-08-16 17:05:42 |
Tyler Hicks |
bug task added |
|
linux-oracle (Ubuntu) |
|
| 2019-08-16 17:05:54 |
Tyler Hicks |
linux-gke-5.0 (Ubuntu Xenial): status |
New |
Invalid |
|
| 2019-08-16 17:06:11 |
Tyler Hicks |
linux-gke-5.0 (Ubuntu Disco): status |
New |
Invalid |
|
| 2019-08-16 17:06:52 |
Tyler Hicks |
linux-gke-5.0 (Ubuntu Eoan): status |
New |
Invalid |
|
| 2019-08-16 17:07:08 |
Tyler Hicks |
linux-gke-4.15 (Ubuntu Bionic): status |
New |
Triaged |
|
| 2019-08-16 17:07:18 |
Tyler Hicks |
linux-gke-5.0 (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2019-08-16 17:07:18 |
Tyler Hicks |
linux-gke-5.0 (Ubuntu Bionic): status |
New |
Triaged |
|
| 2019-08-16 17:07:33 |
Tyler Hicks |
linux-gke-4.15 (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2019-08-16 17:07:59 |
Tyler Hicks |
linux-gcp (Ubuntu Xenial): status |
New |
Triaged |
|
| 2019-08-16 17:08:08 |
Tyler Hicks |
linux-gcp (Ubuntu Xenial): importance |
Undecided |
High |
|
| 2019-08-16 17:08:30 |
Tyler Hicks |
linux-gcp (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2019-08-16 17:08:30 |
Tyler Hicks |
linux-gcp (Ubuntu Bionic): status |
New |
Triaged |
|
| 2019-08-16 17:08:35 |
Tyler Hicks |
linux-gcp (Ubuntu Disco): importance |
Undecided |
High |
|
| 2019-08-16 17:08:35 |
Tyler Hicks |
linux-gcp (Ubuntu Disco): status |
New |
Triaged |
|
| 2019-08-16 17:08:40 |
Tyler Hicks |
linux-gcp (Ubuntu Eoan): importance |
Undecided |
High |
|
| 2019-08-16 17:08:40 |
Tyler Hicks |
linux-gcp (Ubuntu Eoan): status |
New |
Triaged |
|
| 2019-08-16 17:08:45 |
Tyler Hicks |
linux-oracle (Ubuntu Xenial): importance |
Undecided |
High |
|
| 2019-08-16 17:08:45 |
Tyler Hicks |
linux-oracle (Ubuntu Xenial): status |
New |
Triaged |
|
| 2019-08-16 17:08:50 |
Tyler Hicks |
linux-oracle (Ubuntu Bionic): importance |
Undecided |
High |
|
| 2019-08-16 17:08:50 |
Tyler Hicks |
linux-oracle (Ubuntu Bionic): status |
New |
Triaged |
|
| 2019-08-16 17:08:54 |
Tyler Hicks |
linux-oracle (Ubuntu Disco): importance |
Undecided |
High |
|
| 2019-08-16 17:08:54 |
Tyler Hicks |
linux-oracle (Ubuntu Disco): status |
New |
Triaged |
|
| 2019-08-16 17:09:00 |
Tyler Hicks |
linux-oracle (Ubuntu Eoan): importance |
Undecided |
High |
|
| 2019-08-16 17:09:00 |
Tyler Hicks |
linux-oracle (Ubuntu Eoan): status |
New |
Triaged |
|
| 2019-08-16 17:10:00 |
Tyler Hicks |
description |
[Impact]
Some cloud-focused kernels have CONFIG_BT enabled but cloud instances shouldn't need bluetooth support. Disabling the bluetooth subsystem reduces the amount of security-sensitive code we have to worry about in the cloud kernels and also has the nice side effect of minimizing build times and kernel sizes.
The cloud kernels known to have bluetooth enabled include:
* [B/D/E] linux-aws (arm64 only)
[Test Case]
1. Install patched kernel and reboot into it
2. Ensure that the following command does NOT display any output:
$ grep CONFIG_BT=[my] /boot/config-$(uname -r)
[Regression Potential]
There could be an unexpected dependence on bluetooth within one of the clouds but I think it is highly unlikely. |
[Impact]
Some cloud-focused kernels have CONFIG_BT enabled but cloud instances shouldn't need bluetooth support. Disabling the bluetooth subsystem reduces the amount of security-sensitive code we have to worry about in the cloud kernels and also has the nice side effect of minimizing build times and kernel sizes.
The cloud kernels known to have bluetooth enabled include:
* [B/D/E] linux-aws (arm64 only)
* [X/B/D/E] linux-gcp
* [B] linux-gke-4.15
* [B] linux-gke-5.0
* [X/B/D/E] linux-oracle
[Test Case]
1. Install patched kernel and reboot into it
2. Ensure that the following command does NOT display any output:
$ grep CONFIG_BT=[my] /boot/config-$(uname -r)
[Regression Potential]
There could be an unexpected dependence on bluetooth within one of the clouds but I think it is highly unlikely. |
|
| 2019-08-16 17:10:43 |
Tyler Hicks |
bug |
|
|
added subscriber Steve Beattie |
| 2020-01-14 19:53:49 |
Terry Rudd |
bug |
|
|
added subscriber Terry Rudd |
| 2020-07-02 19:31:09 |
Steve Langasek |
linux-aws (Ubuntu Disco): status |
Triaged |
Won't Fix |
|
| 2020-07-02 19:31:31 |
Steve Langasek |
linux-gcp (Ubuntu Disco): status |
Triaged |
Won't Fix |
|
| 2020-07-02 19:31:53 |
Steve Langasek |
linux-oracle (Ubuntu Disco): status |
Triaged |
Won't Fix |
|
| 2020-08-18 16:55:18 |
Brian Murray |
linux-aws (Ubuntu Eoan): status |
Triaged |
Won't Fix |
|
| 2020-08-18 16:55:21 |
Brian Murray |
linux-gcp (Ubuntu Eoan): status |
Triaged |
Won't Fix |
|
| 2020-08-18 16:55:54 |
Brian Murray |
linux-oracle (Ubuntu Eoan): status |
Triaged |
Won't Fix |
|
| 2021-02-23 16:17:05 |
Launchpad Janitor |
linux-aws (Ubuntu): status |
Triaged |
Fix Released |
|
| 2021-02-23 16:17:05 |
Launchpad Janitor |
cve linked |
|
2020-16120 |
|
| 2021-02-23 16:17:05 |
Launchpad Janitor |
cve linked |
|
2020-27777 |
|
| 2021-02-23 16:17:05 |
Launchpad Janitor |
cve linked |
|
2020-29372 |
|
| 2021-02-23 17:46:13 |
Launchpad Janitor |
linux-aws (Ubuntu Bionic): status |
Triaged |
Fix Released |
|
| 2021-02-23 17:46:13 |
Launchpad Janitor |
cve linked |
|
2020-29374 |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
nominated for series |
|
Ubuntu Focal |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-aws (Ubuntu Focal) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gcp (Ubuntu Focal) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-oracle (Ubuntu Focal) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gke-4.15 (Ubuntu Focal) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gke-5.0 (Ubuntu Focal) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
nominated for series |
|
Ubuntu Hirsute |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-aws (Ubuntu Hirsute) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gcp (Ubuntu Hirsute) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-oracle (Ubuntu Hirsute) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gke-4.15 (Ubuntu Hirsute) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gke-5.0 (Ubuntu Hirsute) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
nominated for series |
|
Ubuntu Groovy |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-aws (Ubuntu Groovy) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gcp (Ubuntu Groovy) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-oracle (Ubuntu Groovy) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gke-4.15 (Ubuntu Groovy) |
|
| 2021-07-26 04:47:34 |
Khaled El Mously |
bug task added |
|
linux-gke-5.0 (Ubuntu Groovy) |
|
| 2021-07-26 04:48:03 |
Khaled El Mously |
linux-gcp (Ubuntu Focal): status |
New |
Fix Committed |
|
| 2021-07-26 13:32:58 |
Ubuntu Kernel Bot |
tags |
|
verification-needed-focal |
|
| 2021-07-27 06:05:00 |
Khaled El Mously |
bug task deleted |
linux-gke-4.15 (Ubuntu Focal) |
|
|
| 2021-07-27 06:05:12 |
Khaled El Mously |
bug task deleted |
linux-gke-4.15 (Ubuntu Eoan) |
|
|
| 2021-07-28 23:18:40 |
Brian Murray |
linux-aws (Ubuntu Groovy): status |
New |
Won't Fix |
|
| 2021-07-28 23:18:44 |
Brian Murray |
linux-gcp (Ubuntu Groovy): status |
New |
Won't Fix |
|
| 2021-07-28 23:18:48 |
Brian Murray |
linux-gke-4.15 (Ubuntu Groovy): status |
New |
Won't Fix |
|
| 2021-07-28 23:18:51 |
Brian Murray |
linux-gke-5.0 (Ubuntu Groovy): status |
New |
Won't Fix |
|
| 2021-07-28 23:18:55 |
Brian Murray |
linux-oracle (Ubuntu Groovy): status |
New |
Won't Fix |
|
| 2021-08-02 13:32:21 |
Ubuntu Kernel Bot |
tags |
verification-needed-focal |
verification-needed-focal verification-needed-hirsute |
|
| 2021-08-13 21:40:32 |
Khaled El Mously |
tags |
verification-needed-focal verification-needed-hirsute |
verification-done-focal verification-done-hirsute |
|
| 2021-08-16 15:31:47 |
Launchpad Janitor |
linux-gcp (Ubuntu Focal): status |
Fix Committed |
Fix Released |
|
| 2021-08-16 16:21:17 |
Launchpad Janitor |
linux-gcp (Ubuntu Hirsute): status |
New |
Fix Released |
|
| 2021-08-18 23:09:34 |
Launchpad Janitor |
linux-gcp (Ubuntu): status |
Triaged |
Fix Released |
|
| 2021-08-18 23:09:34 |
Launchpad Janitor |
cve linked |
|
2021-33909 |
|
| 2022-01-26 22:01:08 |
Brian Murray |
linux-aws (Ubuntu Hirsute): status |
New |
Won't Fix |
|
| 2022-01-26 22:01:12 |
Brian Murray |
linux-gke-4.15 (Ubuntu Hirsute): status |
New |
Won't Fix |
|
| 2022-01-26 22:01:16 |
Brian Murray |
linux-gke-5.0 (Ubuntu Hirsute): status |
New |
Won't Fix |
|
| 2022-01-26 22:01:27 |
Brian Murray |
linux-oracle (Ubuntu Hirsute): status |
New |
Won't Fix |
|
