Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #93619 > unrolled thread

Processed: [bts-link] source package src:linux

Back to article view | Back to linux.debian.kernel

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Processed: [bts-link] source package src:linux "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-08-06 19:40 +0200
    Bug#1116643: Processed: [bts-link] source package src:linux Vincent Lefevre <vincent@vinc17.net> - 2026-08-06 20:10 +0200
      Bug#1116643: Processed: [bts-link] source package src:linux Vincent Lefevre <vincent@vinc17.net> - 2026-08-06 20:10 +0200
      Bug#1116643: Processed: [bts-link] source package src:linux Salvatore Bonaccorso <carnil@debian.org> - 2026-08-12 21:30 +0200
        Bug#1116643: Processed: [bts-link] source package src:linux Vincent Lefevre <vincent@vinc17.net> - 2026-08-13 13:10 +0200
          Processed: Re: Bug#1116643: Processed: [bts-link] source package  src:linux "Debian Bug Tracking System" <owner@bugs.debian.org> - 2026-08-13 13:10 +0200

#93619 — Processed: [bts-link] source package src:linux

Processing commands for control@bugs.debian.org:

> #
> # bts-link upstream status pull for source package src:linux
> # see http://lists.debian.org/debian-devel-announce/2006/05/msg00001.html
> #     https://bts-link-team.pages.debian.net/bts-link/
> #
> user debian-bts-link@lists.debian.org
Setting user to debian-bts-link@lists.debian.org (was debian-bts-link@lists.debian.org).
> # remote status report for #926794 (http://bugs.debian.org/926794)
> # Bug title: linux-image-4.19.0.0-bpo.4-amd64: Please enable FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER in kernel config
> #  * https://salsa.debian.org/kernel-team/linux/-/merge_requests/2043
> #  * remote status changed: (?) -> opened
> usertags 926794 + status-opened
There were no usertags set.
Usertags are now: status-opened.
> # remote status report for #950308 (http://bugs.debian.org/950308)
> # Bug title: linux-signed-amd64: Please set CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER
> #  * https://salsa.debian.org/kernel-team/linux/-/merge_requests/2043
> #  * remote status changed: (?) -> opened
> usertags 950308 + status-opened
There were no usertags set.
Usertags are now: status-opened.
> # remote status report for #1143236 (http://bugs.debian.org/1143236)
> # Bug title: Request to enable CONFIG_FRAMEBUFFER_CONSOLE_DEFERRED_TAKEOVER for seamless BGRT/Plymouth boot experience
> #  * https://salsa.debian.org/kernel-team/linux/-/merge_requests/2043
> #  * remote status changed: (?) -> opened
> usertags 1143236 + status-opened
There were no usertags set.
Usertags are now: status-opened.
> # remote status report for #1116643 (http://bugs.debian.org/1116643)
> # Bug title: UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
> #  * https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/6303
> #  * remote status changed: (?) -> closed
> #  * closed upstream
> tags 1116643 + fixed-upstream
Bug #1116643 [src:linux] UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
Added tag(s) fixed-upstream.
> usertags 1116643 + status-closed
There were no usertags set.
Usertags are now: status-closed.
> # remote status report for #1139950 (http://bugs.debian.org/1139950)
> # Bug title: amdgpu carrizo: no display signal after modeset
> #  * https://gitlab.freedesktop.org/drm/amd/-/issues/5531
> #  * remote status changed: (?) -> opened
> usertags 1139950 + status-opened
There were no usertags set.
Usertags are now: status-opened.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1116643: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116643
1139950: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1139950
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [next] | [standalone]

#93623 — Bug#1116643: Processed: [bts-link] source package src:linux

On 2026-08-06 17:37:10 +0000, Debian Bug Tracking System wrote:
> Processing commands for control@bugs.debian.org:
> > # remote status report for #1116643 (http://bugs.debian.org/1116643)
> > # Bug title: UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
> > #  * https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/6303
> > #  * remote status changed: (?) -> closed
> > #  * closed upstream
> > tags 1116643 + fixed-upstream
> Bug #1116643 [src:linux] UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
> Added tag(s) fixed-upstream.

At https://gitlab.freedesktop.org/drm/xe/kernel/-/work_items/6303
there is no indication that the bug was fixed upstream.

FYI, I got this error only 3 times:

2025-09-15T13:17:55+02:00 qaa kernel: UBSAN: shift-out-of-bounds in /build/reproducible-path/linux-6.16.7/drivers/gpu/drm/display/drm_dp_mst_topology.c:4574:36
2025-09-15T13:17:55+02:00 qaa kernel: shift exponent -1 is negative
2025-09-15T13:17:55+02:00 qaa kernel: CPU: 9 UID: 0 PID: 41777 Comm: kworker/u64:1 Not tainted 6.16.7+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.16.7-1

2025-09-29T10:01:20+02:00 qaa kernel: UBSAN: shift-out-of-bounds in /build/reproducible-path/linux-6.16.8/drivers/gpu/drm/display/drm_dp_mst_topology.c:4574:36
2025-09-29T10:01:20+02:00 qaa kernel: shift exponent -1 is negative
2025-09-29T10:01:20+02:00 qaa kernel: CPU: 4 UID: 0 PID: 490795 Comm: Xorg Not tainted 6.16.8+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.16.8-1

2025-12-02T09:56:26+01:00 qaa kernel: UBSAN: shift-out-of-bounds in /build/reproducible-path/linux-6.17.9/drivers/gpu/drm/display/drm_dp_mst_topology.c:4575:36
2025-12-02T09:56:26+01:00 qaa kernel: shift exponent -1 is negative
2025-12-02T09:56:26+01:00 qaa kernel: CPU: 4 UID: 0 PID: 34480 Comm: Xorg Not tainted 6.17.9+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.17.9-1

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#93624 — Bug#1116643: Processed: [bts-link] source package src:linux

Control: tags -1 - fixed-upstream

I forgot to remove the "fixed-upstream" tag.

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#93708 — Bug#1116643: Processed: [bts-link] source package src:linux

Hi,

On Thu, Aug 06, 2026 at 07:58:38PM +0200, Vincent Lefevre wrote:
> On 2026-08-06 17:37:10 +0000, Debian Bug Tracking System wrote:
> > Processing commands for control@bugs.debian.org:
> > > # remote status report for #1116643 (http://bugs.debian.org/1116643)
> > > # Bug title: UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
> > > #  * https://gitlab.freedesktop.org/drm/xe/kernel/-/issues/6303
> > > #  * remote status changed: (?) -> closed
> > > #  * closed upstream
> > > tags 1116643 + fixed-upstream
> > Bug #1116643 [src:linux] UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
> > Added tag(s) fixed-upstream.
> 
> At https://gitlab.freedesktop.org/drm/xe/kernel/-/work_items/6303
> there is no indication that the bug was fixed upstream.
> 
> FYI, I got this error only 3 times:
> 
> 2025-09-15T13:17:55+02:00 qaa kernel: UBSAN: shift-out-of-bounds in /build/reproducible-path/linux-6.16.7/drivers/gpu/drm/display/drm_dp_mst_topology.c:4574:36
> 2025-09-15T13:17:55+02:00 qaa kernel: shift exponent -1 is negative
> 2025-09-15T13:17:55+02:00 qaa kernel: CPU: 9 UID: 0 PID: 41777 Comm: kworker/u64:1 Not tainted 6.16.7+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.16.7-1
> 
> 2025-09-29T10:01:20+02:00 qaa kernel: UBSAN: shift-out-of-bounds in /build/reproducible-path/linux-6.16.8/drivers/gpu/drm/display/drm_dp_mst_topology.c:4574:36
> 2025-09-29T10:01:20+02:00 qaa kernel: shift exponent -1 is negative
> 2025-09-29T10:01:20+02:00 qaa kernel: CPU: 4 UID: 0 PID: 490795 Comm: Xorg Not tainted 6.16.8+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.16.8-1
> 
> 2025-12-02T09:56:26+01:00 qaa kernel: UBSAN: shift-out-of-bounds in /build/reproducible-path/linux-6.17.9/drivers/gpu/drm/display/drm_dp_mst_topology.c:4575:36
> 2025-12-02T09:56:26+01:00 qaa kernel: shift exponent -1 is negative
> 2025-12-02T09:56:26+01:00 qaa kernel: CPU: 4 UID: 0 PID: 34480 Comm: Xorg Not tainted 6.17.9+deb14-amd64 #1 PREEMPT(lazy)  Debian 6.17.9-1

The fix upstream would be:

v7.0-rc1: 342ccffd9f77fc29fe1c05fd145e4d842bd2feaa drm/display/dp_mst: Add protection against 0 vcpi

which got backported in turn as well to

v6.1.165: 95dbd525efce2a9e9e1c50ad15213de644c85ad0 drm/display/dp_mst: Add protection against 0 vcpi
v6.6.128: ac9a7c329a5610051fc476644c9b9145a5965ecb drm/display/dp_mst: Add protection against 0 vcpi
v6.12.75: 3f44cdb5371faf225af37d5caba8f21ec0572469 drm/display/dp_mst: Add protection against 0 vcpi
v6.18.16: 4d2ccdea18b564e3f73e3e543854acea64e6277d drm/display/dp_mst: Add protection against 0 vcpi

(but that is less relevant for this bug, if you are running unstable
kernel, so moving to the last kernel in unstable includes the above).

Regards,
Salvatore

[toc] | [prev] | [next] | [standalone]

#93716 — Bug#1116643: Processed: [bts-link] source package src:linux

Control: tags -1 fixed-upstream - moreinfo

On 2026-08-12 21:25:16 +0200, Salvatore Bonaccorso wrote:
> The fix upstream would be:
> 
> v7.0-rc1: 342ccffd9f77fc29fe1c05fd145e4d842bd2feaa drm/display/dp_mst: Add protection against 0 vcpi

https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=342ccffd9f77fc29fe1c05fd145e4d842bd2feaa

which was committed on 2025-11-28, so the last time I got the issue
(only a few days later), the kernel (6.*) did not have the fix.

BTW, this is CVE-2025-71305:

https://nvd.nist.gov/vuln/detail/CVE-2025-71305

> which got backported in turn as well to
> 
> v6.1.165: 95dbd525efce2a9e9e1c50ad15213de644c85ad0 drm/display/dp_mst: Add protection against 0 vcpi
> v6.6.128: ac9a7c329a5610051fc476644c9b9145a5965ecb drm/display/dp_mst: Add protection against 0 vcpi
> v6.12.75: 3f44cdb5371faf225af37d5caba8f21ec0572469 drm/display/dp_mst: Add protection against 0 vcpi
> v6.18.16: 4d2ccdea18b564e3f73e3e543854acea64e6277d drm/display/dp_mst: Add protection against 0 vcpi
> 
> (but that is less relevant for this bug, if you are running unstable
> kernel, so moving to the last kernel in unstable includes the above).

Yes, the machine in question is running unstable (though I sometimes
uses an older kernel due to another bug, which is not fixed yet).

So I suppose that this bug could now be closed.

-- 
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)

[toc] | [prev] | [next] | [standalone]

#93717 — Processed: Re: Bug#1116643: Processed: [bts-link] source package src:linux

Processing control commands:

> tags -1 fixed-upstream - moreinfo
Bug #1116643 [src:linux] UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
Added tag(s) fixed-upstream.
Bug #1116643 [src:linux] UBSAN: shift-out-of-bounds in .../drivers/gpu/drm/display/drm_dp_mst_topology.c (shift exponent -1)
Removed tag(s) moreinfo.

-- 
1116643: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1116643
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.kernel

csiph-web