← Back to team overview

kernel-packages team mailing list archive

[Bug 1241251] Re: Some kernel modules are failing digital signature checks during boot - kernel is tainted.

 

ApportVersion: 2.12.5-0ubuntu2
Architecture: i386
AudioDevicesInUse:
 USER        PID ACCESS COMMAND
 /dev/snd/controlC0:  melky      1235 F.... pulseaudio
DistroRelease: Ubuntu 13.10
HibernationDevice: RESUME=UUID=7cc4a089-9fe8-4c7d-b0d0-a9feb391f6bf
InstallationDate: Installed on 2013-10-18 (0 days ago)
InstallationMedia: Xubuntu 13.10 "Saucy Salamander" - Release i386 (20131016)
Lsusb:
 Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
 Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
 Bus 002 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
MachineType: ASUSTeK Computer Inc. A6JC
MarkForUpload: True
Package: linux (not installed)
PccardctlIdent:
 Socket 0:
   no product info available
PccardctlStatus:
 Socket 0:
   no card
ProcFB: 0 nouveaufb
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.11.0-12-generic root=UUID=b1b0e52c-3519-4d81-9607-e164297cd8c2 ro
ProcVersionSignature: Ubuntu 3.11.0-12.19-generic 3.11.3
RelatedPackageVersions:
 linux-restricted-modules-3.11.0-12-generic N/A
 linux-backports-modules-3.11.0-12-generic  N/A
 linux-firmware                             1.116
RfKill:
 0: phy0: Wireless LAN
 	Soft blocked: no
 	Hard blocked: no
Tags:  saucy
Uname: Linux 3.11.0-12-generic i686
UpgradeStatus: No upgrade log present (probably fresh install)
UserGroups: adm cdrom dip lpadmin plugdev sambashare sudo
dmi.bios.date: 10/04/2006
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: A6JCMAS.220
dmi.board.asset.tag: To Be Filled By O.E.M.
dmi.board.name: A6JC
dmi.board.vendor: ASUSTeK Computer Inc.
dmi.board.version: 1.0
dmi.chassis.type: 10
dmi.chassis.vendor: ASUSTeK Computer Inc.
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrA6JCMAS.220:bd10/04/2006:svnASUSTeKComputerInc.:pnA6JC:pvr1.0:rvnASUSTeKComputerInc.:rnA6JC:rvr1.0:cvnASUSTeKComputerInc.:ct10:cvr:
dmi.product.name: A6JC
dmi.product.version: 1.0
dmi.sys.vendor: ASUSTeK Computer Inc.


** Tags added: apport-collected

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1241251

Title:
  Some kernel modules are failing digital signature checks during boot -
  kernel is tainted.

Status in “linux” package in Ubuntu:
  Confirmed

Bug description:
  Initial configuration:
   Xubuntu 13.10 64-bit, iso SHA256 is:
  1862b69cffcfc41587109a971a8fe72b2dc26dbd762cdb4704965d668514fa95 *xubuntu-13.10-desktop-amd64.iso

  To reproduce:
  1) Verify that SHA256 of iso image is correct. I also checked GPG signature to make sure these are proper SHA256 hashes.
  2) Put ISO to USB flash stick. I used dd to put iso to 2Gb flash drive.
  3) Boot from USB flash and verify CD image using boot option to be extra sure ISO is not damaged.
  4) Make sure ISO checks are OK. 
  5) Now boot USB flash to live OS session ("Try ... without installing").
  6) Launch terminal.
  7) dmesg | grep -i taint
  8) Make sure kernel is getting tainted due to problems with some modules signatures. 

  Result:
  * On my desktop PC I'm getting kernel taint due to missing signature or key in module "mii" (used by RTL8169 driver).
  * On my notebook I'm getting kernel taint due to missing signature or key for "video" module (used by Intel GPU driver?)

  What's going up? Are your ISO images are okay? Or they were tampered
  with and some kernel modules are fakes? Please check ASAP.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1241251/+subscriptions