linux-kernel - Re: [RFC][PATCH 00/17] Fix up the recent SRSO patches

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <0065fda592b2652d1a2730ddbc81cea6@posteo.net>
Date: Wed, 17 Apr 2024 08:08:53 +0000
From: a-development@...teo.de
To: Borislav Petkov <bp@...en8.de>
Cc: x86@...nel.org, linux-kernel@...r.kernel.org, peterz@...radead.org,
 David.Kaplan@....com, Andrew.Cooper3@...rix.com, jpoimboe@...nel.org,
 gregkh@...uxfoundation.org
Subject: Re: [RFC][PATCH 00/17] Fix up the recent SRSO patches

Today I failed to suspend, and the spec_rstack thing was off.

https://up.tail.ws/txt/non-working-suspend-2.txt




On 16.04.2024 22:14, a-development@...teo.de wrote:
> Now that it is deactivated, the machine no longer suspends!
> 
> https://up.tail.ws/txt/non-working-suspend.txt
> 
>> Then, the other thing you could try is whether suspend works without
>> that proprietary crap.
> 
> I refuse. I can explain. I tried lots of capture cards that stated
> they support uvcvideo and linux.
> This problem existed prior and I need it for work on this machine.
> But none of them worked reliably or would straight up glitch out.
> Thats because they do not implement it properly.
> 
> It had to be a product from Magewell, who manage an array of bash
> scripts and the AUR maintainer gets updates if something breaks, too.
> Why do I use a PCIe HDMI Capture Card?
> I need to use Cameras and Displays.
> 
> As for USB Cameras, unless its a product from e.g Logitech, they kept
> giving me similar headaches.
> And that included an older setup that ran a Intel i7 8700K as well.
> 
> Thx.
> 
> 
> 
> On 16.04.2024 10:45, Borislav Petkov wrote:
>> On Tue, Apr 16, 2024 at 06:48:54AM +0000, a-development@...teo.de 
>> wrote:
>>> It worked, it worked!
>>> 
>>> https://up.tail.ws/txt/working-suspend.txt
>>> 
>>> I've tested it now quite some time.
>>> But, I also had to start using 6.6.26-1-lts because my magewell 
>>> capture card
>>> wouldn't without.
>> 
>> Right, that thing I guess:
>> 
>> [Mon Apr 15 18:37:58 2024] ProCapture: loading out-of-tree module 
>> taints kernel.
>> [Mon Apr 15 18:37:58 2024] ProCapture: module verification failed:
>> signature and/or required key missing - tainting kernel
>> 
>> So, machines do suspend even with SRSO enabled and since your machine 
>> is
>> affected, you probably should try without spec_rstack_overflow=off to
>> see if it works with the new kernel.
>> 
>> Then, the other thing you could try is whether suspend works without
>> that proprietary crap.
>> 
>> And then we can see.
>> 
>> Thx.