This bug was fixed in the package linux-raspi - 6.5.0-1008.11

---------------
linux-raspi (6.5.0-1008.11) mantic; urgency=medium

  * mantic/linux-raspi: 6.5.0-1008.11 -proposed tracker (LP: #2041533)

  * Packaging resync (LP: #1786013)
    - [Packaging] resync update-dkms-versions helper
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)

  * drop all references to is_rust_module.sh in kernels >= 6.5 (LP: #2038611)
    - [Packaging] raspi: drop references to is_rust_module.sh

  * Unnecessary armhf DTB (LP: #2039431)
    - [Config] raspi: Set ARCH_BRCMSTB=n for armhf

  * disable shiftfs (LP: #2038522)
    - [Config] raspi: disable shiftfs

  * openvswitch fails on raspberry pi 4 (LP: #2040524)
    - [Packaging] raspi: Include openvswitch in linux-modules

  * Fan speed control not working on Pi 5 under Ubuntu 23.10 (LP: #2041741)
    - driver: thermal: step_wise: Fix uninitialized variable

  * Raspberry Pi 3B+ doesnt boot from USB on 23.10 Mantic (LP: #2039786)
    - SAUCE: Revert "usb: misc: onboard-hub: add support for Microchip USB2514B
      USB 2.0 hub"

  [ Ubuntu: 6.5.0-14.14 ]

  * mantic/linux: 6.5.0-14.14 -proposed tracker (LP: #2042660)
  * Boot log print hang on screen, no login prompt on Aspeed 2600 rev 52 BMC
    (LP: #2042850)
    - drm/ast: Add BMC virtual connector
  * arm64 atomic issues cause disk corruption (LP: #2042573)
    - locking/atomic: scripts: fix fallback ifdeffery
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

  [ Ubuntu: 6.5.0-12.12 ]

  * mantic/linux: 6.5.0-12.12 -proposed tracker (LP: #2041536)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
    - [Packaging] update helper scripts
    - debian/dkms-versions -- update from kernel-versions (main/2023.10.30)
  * CVE-2023-5633
    - drm/vmwgfx: Keep a gem reference to user bos in surfaces
  * CVE-2023-5345
    - fs/smb/client: Reset password pointer to NULL
  * CVE-2023-39189
    - netfilter: nfnetlink_osf: avoid OOB read
  * CVE-2023-4244
    - netfilter: nft_set_rbtree: skip sync GC for new elements in this 
transaction
  * apparmor restricts read access of user namespace mediation sysctls to root
    (LP: #2040194)
    - SAUCE: apparmor: open userns related sysctl so lxc can check if 
restriction
      are in place
  * AppArmor spams kernel log with assert when auditing (LP: #2040192)
    - SAUCE: apparmor: fix request field from a prompt reply that denies all
      access
  * apparmor notification files verification (LP: #2040250)
    - SAUCE: apparmor: fix notification header size
  * apparmor oops when racing to retrieve a notification (LP: #2040245)
    - SAUCE: apparmor: fix oops when racing to retrieve notification
  * SMC stats: Wrong bucket calculation for payload of exactly 4096 bytes
    (LP: #2039575)
    - net/smc: Fix pos miscalculation in statistics
  * Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
    - SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on 
Meteor
      Lake
    - SAUCE: platform/x86: int3472: Add handshake GPIO function
  * CVE-2023-45898
    - ext4: fix slab-use-after-free in ext4_es_insert_extent()
  * CVE-2023-31085
    - ubi: Refuse attaching if mtd's erasesize is 0
  * CVE-2023-5717
    - perf: Disallow mis-matched inherited group reads
  * CVE-2023-5178
    - nvmet-tcp: Fix a possible UAF in queue intialization setup
  * CVE-2023-5158
    - vringh: don't use vringh_kiov_advance() in vringh_iov_xfer()
  * CVE-2023-5090
    - x86: KVM: SVM: always update the x2avic msr interception
  * [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
    (LP: #2033406)
    - [Packaging] Make WWAN driver loadable modules
  * Unable to power off the system with MTL CPU (LP: #2039405)
    - Revert "x86/smp: Put CPUs into INIT on shutdown if possible"
  * usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
    - [Packaging] Make linux-tools-common depend on hwdata
  * drop all references to is_rust_module.sh in kernels >= 6.5 (LP: #2038611)
    - [Packaging] drop references to is_rust_module.sh
  * disable shiftfs (LP: #2038522)
    - SAUCE: ceph: enable unsafe idmapped mounts by default
    - [Config] disable shiftfs
  * Infinite systemd loop when power off the machine with multiple MD RAIDs
    (LP: #2036184)
    - md: Put the right device in md_seq_next
  * [Mediatek] mt8195-demo: enable CONFIG_MTK_IOMMU as module for multimedia and
    PCIE peripherals (LP: #2036587)
    - [Config] Enable CONFIG_MTK_IOMMU on arm64
  * Realtek 8852CE WiFi 6E country code udpates (LP: #2037273)
    - wifi: rtw89: regd: update regulatory map to R64-R43
  * Unable to use nvme drive to install Ubuntu 23.10 (LP: #2040157)
    - misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to
      probe
  * CVE-2023-42754
    - ipv4: fix null-deref in ipv4_link_failure
  * linux-*: please enable dm-verity kconfigs to allow MoK/db verified root
    images (LP: #2019040)
    - [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y
  * Fix RCU warning on AMD laptops (LP: #2036377)
    - power: supply: core: Use blocking_notifier_call_chain to avoid RCU 
complaint
  * allow io_uring to be disabled in runtime (LP: #2035116)
    - io_uring: add a sysctl to disable io_uring system-wide
  * Fix unstable audio at low levels on Thinkpad P1G4 (LP: #2037077)
    - ALSA: hda/realtek - ALC287 I2S speaker platform support

 -- Juerg Haefliger <juerg.haefli...@canonical.com>  Wed, 22 Nov 2023
10:52:51 +0100

** Changed in: linux-raspi (Ubuntu Mantic)
       Status: Fix Committed => Fix Released

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-4244

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-45898

** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-5633

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux-raspi in Ubuntu.
https://bugs.launchpad.net/bugs/2040524

Title:
  openvswitch fails on raspberry pi 4

Status in linux-raspi package in Ubuntu:
  Confirmed
Status in linux-raspi source package in Jammy:
  Fix Committed
Status in linux-raspi source package in Lunar:
  Fix Released
Status in linux-raspi source package in Mantic:
  Fix Released

Bug description:
  [Impact]

  microovn snap is not working.

  [Fix]

  Add openvswitch module to linux-modules.

  [Test Case]

  See 'Original description' below.

  [Regression Potential]

  Just moving a kernel module which might be loaded on more systems now.
  If bad, the usual kernel freezes/crashes/...

  [Original Descritption]

  I have a homelab and I'm experimenting with adding arm nodes to my
  existing cluster. MicroOVN works fine on my x86_64 nodes but fails on
  my arm nodes (raspberry pi 4).

  I am using microovn 22.03/stable (rev 295). When I run "microovn init"
  on the arm nodes, I get the error

  Error: Post "http://control.socket/cluster/control": context deadline
  exceeded

  The output from "snap services microovn" is:

  Service                          Startup   Current   Notes
  microovn.central                 disabled  inactive  -
  microovn.chassis                 enabled   active    -
  microovn.daemon                  enabled   active    -
  microovn.ovn-northd              disabled  inactive  -
  microovn.ovn-ovsdb-server-nb     disabled  inactive  -
  microovn.ovn-ovsdb-server-sb     disabled  inactive  -
  microovn.refresh-expiring-certs  enabled   inactive  timer-activated
  microovn.switch                  enabled   inactive  -

  The output from "systemctl | grep ovn" is:

   run-snapd-ns-microovn.mnt.mount                                              
                     loaded active mounted   /run/snapd/ns/microovn.mnt
    snap-microovn-301.mount                                                     
                      loaded active mounted   Mount unit for microovn, revision 
301
    snap.microovn.chassis.service                                               
                      loaded active running   Service for snap application 
microovn.chassis
    snap.microovn.daemon.service                                                
                      loaded active running   Service for snap application 
microovn.daemon
  ● snap.microovn.switch.service                                                
                      loaded failed failed    Service for snap application 
microovn.switch
    snap.microovn.refresh-expiring-certs.timer                                  
                      loaded active waiting   Timer refresh-expiring-certs for 
snap application microovn.refresh-expiring-certs

  The output from "journalctl -b -u snap.microovn.switch.service" is (in
  relevant part):

  Oct 25 10:55:27 pi01 systemd[1]: Started Service for snap application 
microovn.switch.
  Oct 25 10:55:28 pi01 microovn.switch[7315]:  * 
/var/snap/microovn/common/data/switch/db/conf.db does not exist
  Oct 25 10:55:28 pi01 microovn.switch[7315]:  * Creating empty database 
/var/snap/microovn/common/data/switch/db/conf.db
  Oct 25 10:55:28 pi01 microovn.switch[7315]:  * Starting ovsdb-server
  Oct 25 10:55:28 pi01 ovs-vsctl[7338]: ovs|00001|vsctl|INFO|Called as 
ovs-vsctl --no-wait -- init -- set Open_vSwitch . db-version=8.3.0
  Oct 25 10:55:28 pi01 ovs-vsctl[7348]: ovs|00001|vsctl|INFO|Called as 
ovs-vsctl --no-wait set Open_vSwitch . ovs-version=2.17.7 
"external-ids:system-id=\"pi01\"" "external-ids:rundir=\"/var/snap/microovn/>
  Oct 25 10:55:28 pi01 microovn.switch[7315]:  * Configuring Open vSwitch 
system IDs
  Oct 25 10:55:28 pi01 microovn.switch[7380]: 
/snap/microovn/301/share/openvswitch/scripts/ovs-kmod-ctl: 112: modprobe: 
Permission denied

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux-raspi/+bug/2040524/+subscriptions


-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to