Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #75673
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service |
| Date | 2022-06-19 13:10 +0200 |
| Message-ID | <EA0Yx-5OY8-5@gated-at.bofh.it> (permalink) |
| References | (1 earlier) <ExV6W-4zqH-11@gated-at.bofh.it> <EyKM9-54uO-3@gated-at.bofh.it> <EzHCy-5Dsj-1@gated-at.bofh.it> <ExMwG-4ugp-17@gated-at.bofh.it> <EzHCy-5Dsj-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
On Sat, 2022-06-18 at 16:21 +0200, Ben Hutchings wrote:
> On Thu, 2022-06-16 at 01:28 +0200, Ben Hutchings wrote:
> [...]
>
> > linux-image-4.19.0-17-amd64 4.19.194-1 lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko
> > linux-image-4.19.0-17-amd64 4.19.194-2 lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko
> > linux-image-4.19.0-17-amd64 4.19.194-3 lib/modules/4.19.0-17-amd64/kernel/drivers/dma/dw/dw_dmac_core.ko
> [...]
> > A significant pattern visible here is a short signature for the same
> > module in multiple consecutive versions, where the module may have
> > identical contents. That implies that this is a reproducible issue for
> > certain inputs that cannot be worked around by re-running the signing
> > process.
> >
> > However, I have *not* yet verified that all short signatures really are
> > invalid.
>
> These module files are indeed identical, and their signatures are
> rejected by the kernel.
>
> I'm now looking at whether the missing bytes are recoverable (e.g. are
> they always zeroes).
[...]
I wrote a script to try all possible byte values for 2 bytes before or
after the short signature. For this particular file, none of them
producd a valid signature. So the short signatures seem to be
corrupted in a more complex way.
In the mean time, we have another security update coming which might
not hit this bug again. But there are 28,679 signed binaries across
the three architectures, so the probability is only about 65%.
Ben.
--
Ben Hutchings
The most exhausting thing in life is being insincere.
- Anne Morrow Lindberg
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ben Hutchings <ben@decadent.org.uk> - 2022-06-13 18:30 +0200
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ben Hutchings <ben@decadent.org.uk> - 2022-06-18 16:30 +0200
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ben Hutchings <ben@decadent.org.uk> - 2022-06-18 16:40 +0200
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ben Hutchings <ben@decadent.org.uk> - 2022-06-19 13:10 +0200
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ansgar <ansgar@debian.org> - 2022-07-04 14:20 +0200
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ben Hutchings <ben@decadent.org.uk> - 2022-07-04 17:30 +0200
Bug#1012741: modprobe: ERROR: could not insert 'crc_itu_t': Key was rejected by service Ansgar <ansgar@debian.org> - 2022-07-04 22:10 +0200
csiph-web