Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #89150 > unrolled thread

Bug#1114773: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1

Started byBen Hutchings <ben@decadent.org.uk>
First post2025-09-09 22:10 +0200
Last post2025-09-09 22:10 +0200
Articles 2 — 2 participants

Back to article view | Back to linux.debian.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Bug#1114773: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1 Ben Hutchings <ben@decadent.org.uk> - 2025-09-09 22:10 +0200
    Processed: Re: Bug#1114773: linux-image-6.1.0-39-amd64: Kernel  panic when booting with kernel commandline parameter fips=1 "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-09-09 22:10 +0200

#89150 — Bug#1114773: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1

FromBen Hutchings <ben@decadent.org.uk>
Date2025-09-09 22:10 +0200
SubjectBug#1114773: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1
Message-ID<LtcP7-e6X2-3@gated-at.bofh.it>

[Multipart message — attachments visible in raw view] — view raw

Control: tag -1 confirmed

On Tue, 2025-09-09 at 19:46 +0200, Bavarian Developer wrote:
>  
> 
> Package: src:linux
>  Version: 6.1.148-1
>  Severity: important
>  
> 
>  Dear Maintainer,
>  
> 
>  when booting the a complete vanilla installation of Debian 12.12 (installed from the released CD image) in Virtualbox, there is an immediate kernel panic.
>  
> 
>  The error message is as follows:
>  
> 
>  Kernel panic - not syncing: Module crc32_intel signature verification failed in FIPS mode
>  
> 
>  The commit history shows changes of kernel module signing.
[...]

This may have been triggered by the switch from RSA to ECDSA signatures
for modules.  We could easily revert that if necessary.

I've checked and found that this doesn't happen with the 6.12 kernel
where we also use ECDSA signatures.  There have been changes to the
crypto core that added self-tests and allow-listing of ECDSA in FIPS
mode.  But I think it would be safer to switch back to RSA here.

Ben.

-- 
Ben Hutchings
Every program is either trivial or else contains at least one bug

[toc] | [next] | [standalone]


#89151 — Processed: Re: Bug#1114773: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1

From"Debian Bug Tracking System" <owner@bugs.debian.org>
Date2025-09-09 22:10 +0200
SubjectProcessed: Re: Bug#1114773: linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1
Message-ID<LtcP7-e6X2-7@gated-at.bofh.it>
In reply to#89150
Processing control commands:

> tag -1 confirmed
Bug #1114773 [src:linux] linux-image-6.1.0-39-amd64: Kernel panic when booting with kernel commandline parameter fips=1
Added tag(s) confirmed.

-- 
1114773: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1114773
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web