Undefined Behavior Sanitizer (UBSAN) causes failure to match symbols
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu on IBM z Systems |
Fix Committed
|
Undecided
|
Skipper Bug Screeners | ||
dh-kpatches |
Unknown
|
Unknown
|
|||
kpatch (Ubuntu) |
In Progress
|
Undecided
|
Unassigned | ||
Jammy |
In Progress
|
Undecided
|
Unassigned | ||
Kinetic |
Won't Fix
|
Undecided
|
Unassigned | ||
linux (Ubuntu) |
Incomplete
|
Undecided
|
Unassigned | ||
Jammy |
Fix Released
|
Undecided
|
Unassigned |
Bug Description
[ Impact ]
* When UBSAN is enabled in an s390x kernel configuration, kpatch-build can fail to find matching symbols in the vmlinux symbol table (see attached example_
* Disabling UBAAN in s390x kernel configurations resolved the issue for both Jammy 5.15 and Kinetic 5.19. Possibly this could be fixed in kpatch/kpatch-build to continue to enable UBSAN while still allowing Livepatch functionality.
[ Test Plan ]
* Use kpatch-build testcases to build and load a fs/proc/meminfo.c Livepatch on s390x kernel (see attached example_
[ Where problems could occur ]
* A fix in kpatch/kpatch-build to properly handle UBSAN objects shouldn't yield any regressions. If UBSAN is disabled to ultimately get past this issue, it could lead to undefined behavior not being caught.
CVE References
description: | updated |
description: | updated |
tags: | added: s390x |
tags: | added: architecture-s39064 bugnameltc-201635 severity-high targetmilestone-inin--- |
Changed in kpatch (Ubuntu Jammy): | |
assignee: | John Cabaj (john-cabaj) → nobody |
Changed in ubuntu-z-systems: | |
assignee: | nobody → Skipper Bug Screeners (skipper-screen-team) |
Changed in ubuntu-z-systems: | |
status: | New → In Progress |
Changed in kpatch (Ubuntu Jammy): | |
status: | New → In Progress |
Changed in kpatch (Ubuntu): | |
status: | New → In Progress |
Changed in linux (Ubuntu Jammy): | |
status: | Incomplete → Fix Committed |
Changed in ubuntu-z-systems: | |
status: | In Progress → Fix Committed |
Currently attempting to make changes to kpatch/kpatch-build