An Ubuntu kernel bug causes container crashes

Posted Jul 11, 2022 18:16 UTC (Mon) by farnz (subscriber, #17727)
In reply to: An Ubuntu kernel bug causes container crashes by ballombe
Parent article: An Ubuntu kernel bug causes container crashes

The trouble is that stable kernels do contain bugs all over the shop, some of which are exploitable. So the question becomes not "are there bugs in my EOL kernel?", to which the answer is definitely "yes", but "are the bugs in my EOL kernel of concern to me, given that I do not know the scope and impact of the bugs in my kernel?", which is a much harder question to answer.

And it's made exponentially harder by regressions in newer kernels which means that there's no good answer - do you take a newer kernel that fails to boot one time in 10 because your PCIe GPU is left in a bad state by firmware, or stick to the older kernel that has a remotely exploitable bug that you don't know about that lets an intruder escalate privileges on your machine.

Ideally, there would simply not be regressions in the kernel, so updating would always be the right thing to do. But that's not the world we live in; my experience is that I'm better off taking Linus's recent release, finding regressions and reporting them ASAP (so that the bug reports go to people who've been working in the right bits of the kernel recently, and bisect is often possible in reasonable time) than putting off updates for as long as possible and then reporting a huge number of regressions in one go, but other people will have had other experiences.

An Ubuntu kernel bug causes container crashes

Posted Jul 12, 2022 4:30 UTC (Tue) by wtarreau (subscriber, #51152) [Link]

Thanks for this, it's very important to have as many -rc users as possible, precisely for the reasons you explained well.