2023-07-14 07:02:58 |
You-Sheng Yang |
bug |
|
|
added bug |
2023-07-14 07:03:36 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.0 (Ubuntu) |
|
2023-07-14 07:03:45 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.1 (Ubuntu) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
nominated for series |
|
Ubuntu Mantic |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux (Ubuntu Mantic) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.0 (Ubuntu Mantic) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.1 (Ubuntu Mantic) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
nominated for series |
|
Ubuntu Lunar |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux (Ubuntu Lunar) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.0 (Ubuntu Lunar) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.1 (Ubuntu Lunar) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
nominated for series |
|
Ubuntu Jammy |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux (Ubuntu Jammy) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.0 (Ubuntu Jammy) |
|
2023-07-14 07:03:56 |
You-Sheng Yang |
bug task added |
|
linux-oem-6.1 (Ubuntu Jammy) |
|
2023-07-14 07:04:06 |
You-Sheng Yang |
linux (Ubuntu Jammy): status |
New |
Invalid |
|
2023-07-14 07:04:18 |
You-Sheng Yang |
linux-oem-6.0 (Ubuntu Jammy): status |
New |
Won't Fix |
|
2023-07-14 07:04:27 |
You-Sheng Yang |
linux-oem-6.0 (Ubuntu Lunar): status |
New |
Invalid |
|
2023-07-14 07:04:35 |
You-Sheng Yang |
linux-oem-6.0 (Ubuntu Mantic): status |
New |
Invalid |
|
2023-07-14 07:04:49 |
You-Sheng Yang |
linux-oem-6.1 (Ubuntu Jammy): importance |
Undecided |
High |
|
2023-07-14 07:04:49 |
You-Sheng Yang |
linux-oem-6.1 (Ubuntu Jammy): status |
New |
In Progress |
|
2023-07-14 07:04:49 |
You-Sheng Yang |
linux-oem-6.1 (Ubuntu Jammy): assignee |
|
You-Sheng Yang (vicamo) |
|
2023-07-14 07:04:58 |
You-Sheng Yang |
linux-oem-6.1 (Ubuntu Lunar): status |
New |
Invalid |
|
2023-07-14 07:05:07 |
You-Sheng Yang |
linux-oem-6.1 (Ubuntu Mantic): status |
New |
Invalid |
|
2023-07-14 07:05:36 |
You-Sheng Yang |
linux (Ubuntu Lunar): importance |
Undecided |
High |
|
2023-07-14 07:05:36 |
You-Sheng Yang |
linux (Ubuntu Lunar): status |
New |
In Progress |
|
2023-07-14 07:05:36 |
You-Sheng Yang |
linux (Ubuntu Lunar): assignee |
|
You-Sheng Yang (vicamo) |
|
2023-07-14 07:05:50 |
You-Sheng Yang |
linux (Ubuntu Mantic): importance |
Undecided |
High |
|
2023-07-14 07:05:50 |
You-Sheng Yang |
linux (Ubuntu Mantic): status |
New |
In Progress |
|
2023-07-14 07:05:50 |
You-Sheng Yang |
linux (Ubuntu Mantic): assignee |
|
You-Sheng Yang (vicamo) |
|
2023-07-14 07:30:50 |
You-Sheng Yang |
summary |
UBSAN errors in amd_sfh |
UBSAN: shift-out-of-bounds in amd_sfh |
|
2023-07-14 07:32:43 |
You-Sheng Yang |
bug |
|
|
added subscriber Canonical Hardware Enablement |
2023-07-14 07:33:00 |
You-Sheng Yang |
tags |
|
amd oem-priority originate-from-2026792 |
|
2023-07-14 07:42:36 |
You-Sheng Yang |
tags |
amd oem-priority originate-from-2026792 |
amd oem-priority originate-from-2025438 originate-from-2026792 |
|
2023-07-14 07:48:14 |
You-Sheng Yang |
description |
UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50
[ 9.877309] Workqueue: events amd_sfh_work_buffer [amd_sfh]
[ 9.877327] Call Trace:
[ 9.877331] <TASK>
[ 9.877335] dump_stack_lvl+0x49/0x63
[ 9.877346] dump_stack+0x10/0x16
[ 9.877348] ubsan_epilogue+0x9/0x36
[ 9.877357] __ubsan_handle_shift_out_of_bounds.cold+0x61/0xef
[ 9.877363] ? _raw_spin_lock+0x17/0x50
[ 9.877369] ? raw_spin_rq_lock_nested+0x2e/0xa0
[ 9.877378] ? psi_group_change+0x1e2/0x4a0
[ 9.877385] float_to_int.cold+0x18/0xc8 [amd_sfh]
[ 9.877394] ? get_feature_rep+0xb0/0xb0 [amd_sfh]
[ 9.877402] get_input_rep+0x219/0x2f0 [amd_sfh]
[ 9.877409] ? up+0x37/0x70
[ 9.877414] ? hid_input_report+0x104/0x170 [hid]
[ 9.877428] amd_sfh_work_buffer+0x94/0x150 [amd_sfh]
[ 9.877436] process_one_work+0x21f/0x3f0
[ 9.877443] worker_thread+0x50/0x3e0
[ 9.877446] ? process_one_work+0x3f0/0x3f0
[ 9.877449] kthread+0xfd/0x130
[ 9.877452] ? kthread_complete_and_exit+0x20/0x20
[ 9.877454] ret_from_fork+0x22/0x30
[ 9.877463] </TASK>
Fixes in:
https://github.com/torvalds/linux/commit/c1685a862a4bea863537f06abaa37a123aef493c
https://github.com/torvalds/linux/commit/87854366176403438d01f368b09de3ec2234e0f5
This affects kernel >= v6.0. |
UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50
[ 7.928631] shift exponent 103 is too large for 64-bit type 'long unsigned int'
[ 9.877309] Workqueue: events amd_sfh_work_buffer [amd_sfh]
[ 9.877327] Call Trace:
[ 9.877331] <TASK>
[ 9.877335] dump_stack_lvl+0x49/0x63
[ 9.877346] dump_stack+0x10/0x16
[ 9.877348] ubsan_epilogue+0x9/0x36
[ 9.877357] __ubsan_handle_shift_out_of_bounds.cold+0x61/0xef
[ 9.877363] ? _raw_spin_lock+0x17/0x50
[ 9.877369] ? raw_spin_rq_lock_nested+0x2e/0xa0
[ 9.877378] ? psi_group_change+0x1e2/0x4a0
[ 9.877385] float_to_int.cold+0x18/0xc8 [amd_sfh]
[ 9.877394] ? get_feature_rep+0xb0/0xb0 [amd_sfh]
[ 9.877402] get_input_rep+0x219/0x2f0 [amd_sfh]
[ 9.877409] ? up+0x37/0x70
[ 9.877414] ? hid_input_report+0x104/0x170 [hid]
[ 9.877428] amd_sfh_work_buffer+0x94/0x150 [amd_sfh]
[ 9.877436] process_one_work+0x21f/0x3f0
[ 9.877443] worker_thread+0x50/0x3e0
[ 9.877446] ? process_one_work+0x3f0/0x3f0
[ 9.877449] kthread+0xfd/0x130
[ 9.877452] ? kthread_complete_and_exit+0x20/0x20
[ 9.877454] ret_from_fork+0x22/0x30
[ 9.877463] </TASK>
Fixes in:
https://github.com/torvalds/linux/commit/c1685a862a4bea863537f06abaa37a123aef493c
https://github.com/torvalds/linux/commit/87854366176403438d01f368b09de3ec2234e0f5
This affects kernel >= v6.0. |
|
2023-07-14 08:15:14 |
You-Sheng Yang |
description |
UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50
[ 7.928631] shift exponent 103 is too large for 64-bit type 'long unsigned int'
[ 9.877309] Workqueue: events amd_sfh_work_buffer [amd_sfh]
[ 9.877327] Call Trace:
[ 9.877331] <TASK>
[ 9.877335] dump_stack_lvl+0x49/0x63
[ 9.877346] dump_stack+0x10/0x16
[ 9.877348] ubsan_epilogue+0x9/0x36
[ 9.877357] __ubsan_handle_shift_out_of_bounds.cold+0x61/0xef
[ 9.877363] ? _raw_spin_lock+0x17/0x50
[ 9.877369] ? raw_spin_rq_lock_nested+0x2e/0xa0
[ 9.877378] ? psi_group_change+0x1e2/0x4a0
[ 9.877385] float_to_int.cold+0x18/0xc8 [amd_sfh]
[ 9.877394] ? get_feature_rep+0xb0/0xb0 [amd_sfh]
[ 9.877402] get_input_rep+0x219/0x2f0 [amd_sfh]
[ 9.877409] ? up+0x37/0x70
[ 9.877414] ? hid_input_report+0x104/0x170 [hid]
[ 9.877428] amd_sfh_work_buffer+0x94/0x150 [amd_sfh]
[ 9.877436] process_one_work+0x21f/0x3f0
[ 9.877443] worker_thread+0x50/0x3e0
[ 9.877446] ? process_one_work+0x3f0/0x3f0
[ 9.877449] kthread+0xfd/0x130
[ 9.877452] ? kthread_complete_and_exit+0x20/0x20
[ 9.877454] ret_from_fork+0x22/0x30
[ 9.877463] </TASK>
Fixes in:
https://github.com/torvalds/linux/commit/c1685a862a4bea863537f06abaa37a123aef493c
https://github.com/torvalds/linux/commit/87854366176403438d01f368b09de3ec2234e0f5
This affects kernel >= v6.0. |
[SRU Justification]
[Impact]
UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50
[ 7.928631] shift exponent 103 is too large for 64-bit type 'long unsigned int'
[ 9.877309] Workqueue: events amd_sfh_work_buffer \[amd_sfh]
[ 9.877327] Call Trace:
[ 9.877331] \<TASK>
[ 9.877335] dump_stack_lvl+0x49/0x63
[ 9.877346] dump_stack+0x10/0x16
[ 9.877348] ubsan_epilogue+0x9/0x36
[ 9.877357] __ubsan_handle_shift_out_of_bounds.cold+0x61/0xef
[ 9.877363] ? _raw_spin_lock+0x17/0x50
[ 9.877369] ? raw_spin_rq_lock_nested+0x2e/0xa0
[ 9.877378] ? psi_group_change+0x1e2/0x4a0
[ 9.877385] float_to_int.cold+0x18/0xc8 \[amd_sfh]
[ 9.877394] ? get_feature_rep+0xb0/0xb0 \[amd_sfh]
[ 9.877402] get_input_rep+0x219/0x2f0 \[amd_sfh]
[ 9.877409] ? up+0x37/0x70
[ 9.877414] ? hid_input_report+0x104/0x170 \[hid]
[ 9.877428] amd_sfh_work_buffer+0x94/0x150 \[amd_sfh]
[ 9.877436] process_one_work+0x21f/0x3f0
[ 9.877443] worker_thread+0x50/0x3e0
[ 9.877446] ? process_one_work+0x3f0/0x3f0
[ 9.877449] kthread+0xfd/0x130
[ 9.877452] ? kthread_complete_and_exit+0x20/0x20
[ 9.877454] ret_from_fork+0x22/0x30
[ 9.877463] \</TASK>
[Fix]
Fixes in:
* commit c1685a862a4b ("HID: amd_sfh: Rename the float32 variable")
* commit 878543661764 ("HID: amd_sfh: Fix for shift-out-of-bounds")
[Test Case]
The affected platform should no longer has such error dumped in kernel dmesg at
boot.
[Where problems could occur]
This renamed a variable and corrected the way shift offset is calculated. No
known side effect.
[Other Info]
The affects kernel >= v6.0 and < v6.5, so Unstable/Mantis/Lunar/OEM-6.1 are
nominated for fix.
========== original bug report ==========
UBSAN: shift-out-of-bounds in drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_desc.c:149:50
[ 7.928631] shift exponent 103 is too large for 64-bit type 'long unsigned int'
[ 9.877309] Workqueue: events amd_sfh_work_buffer [amd_sfh]
[ 9.877327] Call Trace:
[ 9.877331] <TASK>
[ 9.877335] dump_stack_lvl+0x49/0x63
[ 9.877346] dump_stack+0x10/0x16
[ 9.877348] ubsan_epilogue+0x9/0x36
[ 9.877357] __ubsan_handle_shift_out_of_bounds.cold+0x61/0xef
[ 9.877363] ? _raw_spin_lock+0x17/0x50
[ 9.877369] ? raw_spin_rq_lock_nested+0x2e/0xa0
[ 9.877378] ? psi_group_change+0x1e2/0x4a0
[ 9.877385] float_to_int.cold+0x18/0xc8 [amd_sfh]
[ 9.877394] ? get_feature_rep+0xb0/0xb0 [amd_sfh]
[ 9.877402] get_input_rep+0x219/0x2f0 [amd_sfh]
[ 9.877409] ? up+0x37/0x70
[ 9.877414] ? hid_input_report+0x104/0x170 [hid]
[ 9.877428] amd_sfh_work_buffer+0x94/0x150 [amd_sfh]
[ 9.877436] process_one_work+0x21f/0x3f0
[ 9.877443] worker_thread+0x50/0x3e0
[ 9.877446] ? process_one_work+0x3f0/0x3f0
[ 9.877449] kthread+0xfd/0x130
[ 9.877452] ? kthread_complete_and_exit+0x20/0x20
[ 9.877454] ret_from_fork+0x22/0x30
[ 9.877463] </TASK>
Fixes in:
https://github.com/torvalds/linux/commit/c1685a862a4bea863537f06abaa37a123aef493c
https://github.com/torvalds/linux/commit/87854366176403438d01f368b09de3ec2234e0f5
This affects kernel >= v6.0. |
|
2023-07-18 08:20:33 |
Stefan Bader |
linux (Ubuntu Mantic): status |
In Progress |
Fix Released |
|
2023-07-24 18:47:23 |
Timo Aaltonen |
linux-oem-6.1 (Ubuntu Jammy): status |
In Progress |
Fix Committed |
|
2023-07-26 14:01:16 |
Ubuntu Kernel Bot |
tags |
amd oem-priority originate-from-2025438 originate-from-2026792 |
amd kernel-spammed-jammy-linux-oem-6.1 oem-priority originate-from-2025438 originate-from-2026792 verification-needed-jammy |
|
2023-07-27 07:57:39 |
Andy Chi |
bug |
|
|
added subscriber OEM Solutions Group: Engineers |
2023-07-27 07:57:44 |
Andy Chi |
tags |
amd kernel-spammed-jammy-linux-oem-6.1 oem-priority originate-from-2025438 originate-from-2026792 verification-needed-jammy |
amd kernel-spammed-jammy-linux-oem-6.1 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-needed-jammy |
|
2023-07-27 08:30:58 |
Andy Chi |
attachment added |
|
dmesg.txt https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2027773/+attachment/5688775/+files/dmesg.txt |
|
2023-07-27 08:31:19 |
Andy Chi |
tags |
amd kernel-spammed-jammy-linux-oem-6.1 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-needed-jammy |
amd kernel-spammed-jammy-linux-oem-6.1 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy |
|
2023-08-02 06:42:52 |
Roxana Nicolescu |
linux (Ubuntu Lunar): status |
In Progress |
Fix Committed |
|
2023-08-10 19:51:47 |
Ubuntu Kernel Bot |
tags |
amd kernel-spammed-jammy-linux-oem-6.1 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy |
amd kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-lunar-linux |
|
2023-08-10 20:18:39 |
Launchpad Janitor |
linux-oem-6.1 (Ubuntu Jammy): status |
Fix Committed |
Fix Released |
|
2023-08-30 21:51:26 |
Ubuntu Kernel Bot |
tags |
amd kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-lunar-linux |
amd kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux |
|
2023-09-06 14:21:12 |
Ubuntu Kernel Bot |
tags |
amd kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux |
amd kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-starfive-v2 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux verification-needed-lunar-linux-starfive |
|
2023-09-09 11:17:32 |
Ubuntu Kernel Bot |
tags |
amd kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-starfive-v2 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux verification-needed-lunar-linux-starfive |
amd kernel-spammed-jammy-linux-aws-6.2-v2 kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-starfive-v2 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-aws-6.2 verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux verification-needed-lunar-linux-starfive |
|
2023-09-12 05:52:29 |
Ubuntu Kernel Bot |
tags |
amd kernel-spammed-jammy-linux-aws-6.2-v2 kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-starfive-v2 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-aws-6.2 verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux verification-needed-lunar-linux-starfive |
amd kernel-spammed-jammy-linux-aws-6.2-v2 kernel-spammed-jammy-linux-nvidia-6.2-v2 kernel-spammed-jammy-linux-oem-6.1 kernel-spammed-lunar-linux-azure-v2 kernel-spammed-lunar-linux-starfive-v2 kernel-spammed-lunar-linux-v2 oem-priority originate-from-2025438 originate-from-2026792 originate-from-2026812 stella verification-done-jammy verification-needed-jammy-linux-aws-6.2 verification-needed-jammy-linux-nvidia-6.2 verification-needed-lunar-linux verification-needed-lunar-linux-azure verification-needed-lunar-linux-starfive |
|