Bug#1056741: bookworm-pu: package nvidia-open-gpu-kernel-modules/525.147.05-1~deb12u1

[Andreas Beckmann]

Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.d...@packages.debian.org
Usertags: pu

[ Reason ]
In order to fix CVE-2023-31022 we need to upgrade
nvidia-open-gpu-kernel-modules to a new upstream release.
(This package must match the version of src:nvidia-graphics-drivers
and/or src:nvidia-graphics-drivers-tesla to be useful, and these two
packages in non-free need to be updated for CVE-2023-31022, too.)

[ Impact ]
An unusable package with open CVEs.

[ Tests ]
Only module building has been tested. Anything else would require
certain hardware and driver usage.

[ Risks ]
Low. Upgrading to a new nvidia driver release in (old-)stable is an
established procedure.

[ Checklist ]
[*] *all* changes are documented in the d/changelog
[ ] I reviewed all changes and I approve them
I didn't read the upstream diff (114 files changed, 7240
insertions(+), 830 deletions(-)), but this corresponds to the
changes in the driver blobs in non-free.
[*] attach debdiff against the package in (old)stable
only for debian/*, upstream changes are excessive
[*] the issue is verified as fixed in unstable

[ Changes ]
Mainly patch refresh for the new upstream release. This is a subset of
the changes also found in the pu requests for
src:nvidia-graphics-drivers{-tesla}.

Upstream changes diffstat, changes not included in the patch
(500kb uncompressed)

CHANGELOG.md | 6 +
README.md | 15 +-
kernel-open/Kbuild | 3 +-
kernel-open/common/inc/nv-hypervisor.h | 1 +
kernel-open/common/inc/nv-mm.h | 59 +-
kernel-open/conftest.sh | 327 ++++++++--
kernel-open/nvidia-drm/nvidia-drm-drv.c | 15 +
kernel-open/nvidia-drm/nvidia-drm.Kbuild | 2 +
kernel-open/nvidia-modeset/nvidia-modeset-linux.c | 8 +
kernel-open/nvidia-modeset/nvidia-modeset-os-interface.h | 2 +
kernel-open/nvidia-uvm/nvidia-uvm.Kbuild | 2 +-
kernel-open/nvidia-uvm/uvm_ce_test.c | 4 +-
kernel-open/nvidia-uvm/uvm_migrate_pageable.h | 2 +-
kernel-open/nvidia/nv-p2p.c | 5 +
kernel-open/nvidia/nv.c | 14 +-
kernel-open/nvidia/nvlink_export.h | 5 +
kernel-open/nvidia/nvlink_os.h | 3 +
src/common/displayport/src/dp_evoadapter.cpp | 6 +-
src/common/inc/nvBldVer.h | 20 +-
src/common/inc/nvUnixVersion.h | 2 +-
src/common/inc/nvlog_defs.h | 17 +-
src/common/inc/swref/published/hopper/gh100/dev_fb.h | 23 +-
src/common/inc/swref/published/hopper/gh100/dev_fbpa.h | 29 +
src/common/inc/swref/published/hopper/gh100/dev_ltc.h | 33 +
src/common/inc/swref/published/hopper/gh100/dev_nv_xpl.h | 52 ++
src/common/inc/swref/published/hopper/gh100/dev_xtl_ep_pri.h | 3 +
src/common/inc/swref/published/hopper/gh100/hwproject.h | 6 +
src/common/inc/swref/published/hopper/gh100/pri_nv_xal_ep.h | 12 +
src/common/inc/swref/published/nvswitch/ls10/dev_nvlipt_lnk_ip.h | 5 +-
src/common/inc/swref/published/nvswitch/ls10/ptop_discovery_ip.h | 28 +
src/common/nvlink/interface/nvlink.h | 5 +
src/common/nvlink/interface/nvlink_export.h | 5 +
src/common/nvlink/interface/nvlink_os.h | 3 +
src/common/nvlink/kernel/nvlink/nvlink_lib_mgmt.c | 50 +-
src/common/nvlink/kernel/nvlink/nvlink_lock.c | 32 +-
src/common/nvswitch/common/inc/soe/soeifcore.h | 24 +-
src/common/nvswitch/common/inc/soe/soeififr.h | 116 +++-
src/common/nvswitch/interface/ctrl_dev_nvswitch.h | 198 +++++-
src/common/nvswitch/kernel/inc/haldef_nvswitch.h | 7 +
src/common/nvswitch/kernel/inc/inforom/inforom_nvl_v3_nvswitch.h | 94 +++
src/common/nvswitch/kernel/inc/inforom/inforom_nvl_v4_nvswitch.h | 37 ++
src/common/nvswitch/kernel/inc/inforom/inforom_nvswitch.h | 12 +-
src/common/nvswitch/kernel/inc/lr10/inforom_lr10.h | 33 +-
src/common/nvswitch/kernel/inc/lr10/lr10.h | 6 +-
src/common/nvswitch/kernel/inc/ls10/inforom_ls10.h | 46 +-
src/common/nvswitch/kernel/inc/ls10/ls10.h | 26 +-
src/common/nvswitch/kernel/inc/ls10/minion_nvlink_defines_public_ls10.h | 7 +-
src/common/nvswitch/kernel/inc/soe/bin/g_soeuc_lr10_dbg.h | 206 +++----
src/common/nvswitch/kernel/inc/soe/bin/g_soeuc_lr10_prd.h | 206 +++----
src/common/nvswitch/kernel/inforom/ifrbbx_nvswitch.c | 22 +-
src/common/nvswitch/kernel/inforom/ifrnvlink_nvswitch.c | 398 +++++++++++-
src/common/nvswitch/kernel/inforom/inforom_nvl_v3_nvswitch.c | 619 +++++++++++++++++++
src/common/nvswitch/kernel/inforom/inforom_nvl_v4_nvswitch.c | 108 ++++
src/common/nvswitch/kernel/lr10/inforom_lr10.c | 490 ++++++++++++++-
src/common/nvswitch/kernel/lr10/intr_lr10.c | 412 ++++++++++++-
src/common/nvswitch/kernel/lr10/link_lr10.c | 117 +++-
src/common/nvswitch/kernel/lr10/lr10.c | 40 +-
src/common/nvswitch/kernel/ls10/inforom_ls10.c | 769 ++++++++++++++++++++++-
src/common/nvswitch/kernel/ls10/intr_ls10.c | 511 ++++++++++++----
src/common/nvswitch/kernel/ls10/link_ls10.c | 160 ++++-
src/common/nvswitch/kernel/ls10/ls10.c | 191 +++++-
src/common/nvswitch/kernel/nvswitch.c | 91 ++-
src/common/sdk/nvidia/inc/class/cl2080_notification.h | 3 +-
src/common/sdk/nvidia/inc/ctrl/ctrl2080/ctrl2080event.h | 53 +-
src/common/sdk/nvidia/inc/ctrl/ctrl2080/ctrl2080nvlink.h | 1 +
src/common/sdk/nvidia/inc/nv-hypervisor.h | 1 +
src/common/sdk/nvidia/inc/nverror.h | 4 +-
src/common/unix/nvidia-3d/src/nvidia-3d-surface.c | 3 +
src/nvidia-modeset/include/nvkms-types.h | 6 +
src/nvidia-modeset/os-interface/include/nvidia-modeset-os-interface.h | 2 +
src/nvidia-modeset/src/dp/nvdp-connector.cpp | 27 +-
src/nvidia-modeset/src/nvkms-evo.c | 2 +
src/nvidia/arch/nvalloc/common/inc/flcnretval.h | 3 +-
src/nvidia/arch/nvalloc/common/inc/inforom/ifrnvl.h | 1271 +++++++++++++++++++++++++++++++++++++++
src/nvidia/arch/nvalloc/common/inc/inforom/ifrstruct.h | 3 +-
src/nvidia/arch/nvalloc/unix/src/os-hypervisor.c | 40 +-
src/nvidia/arch/nvalloc/unix/src/osapi.c | 5 +
src/nvidia/generated/g_client_resource_nvoc.c | 24 +-
src/nvidia/generated/g_gpu_nvoc.c | 11 +
src/nvidia/generated/g_gpu_nvoc.h | 29 +
src/nvidia/generated/g_kern_fsp_nvoc.c | 14 +
src/nvidia/generated/g_kern_mem_sys_nvoc.c | 22 +
src/nvidia/generated/g_kern_mem_sys_nvoc.h | 26 +
src/nvidia/generated/g_kernel_gsp_nvoc.h | 19 +-
src/nvidia/generated/g_kernel_vgpu_mgr_nvoc.h | 5 +-
src/nvidia/generated/g_nv_name_released.h | 7 +
src/nvidia/generated/g_subdevice_nvoc.h | 2 +-
src/nvidia/inc/libraries/mmu/mmu_walk.h | 2 +-
src/nvidia/inc/libraries/nvlog/nvlog.h | 21 +
src/nvidia/kernel/vgpu/nv/rpc.c | 1 +
src/nvidia/src/kernel/diagnostics/nvlog.c | 76 +++
src/nvidia/src/kernel/gpu/arch/hopper/kern_gpu_gh100.c | 23 +
src/nvidia/src/kernel/gpu/bus/arch/maxwell/kern_bus_gm107.c | 16 +-
src/nvidia/src/kernel/gpu/fsp/arch/hopper/kern_fsp_gh100.c | 15 +-
src/nvidia/src/kernel/gpu/fsp/kern_fsp.c | 6 +-
src/nvidia/src/kernel/gpu/gpu.c | 22 +-
src/nvidia/src/kernel/gpu/gpu_registry.c | 20 +-
src/nvidia/src/kernel/gpu/gsp/arch/hopper/kernel_gsp_gh100.c | 24 +-
src/nvidia/src/kernel/gpu/gsp/arch/turing/kernel_gsp_tu102.c | 37 +-
src/nvidia/src/kernel/gpu/gsp/kernel_gsp.c | 222 +++++--
src/nvidia/src/kernel/gpu/gsp/message_queue_cpu.c | 2 +-
src/nvidia/src/kernel/gpu/intr/intr.c | 6 -
src/nvidia/src/kernel/gpu/mem_mgr/arch/ampere/mem_mgr_ga100.c | 2 +-
src/nvidia/src/kernel/gpu/mem_mgr/mem_mgr_regions.c | 2 +-
src/nvidia/src/kernel/gpu/mem_sys/arch/hopper/kern_mem_sys_gh100.c | 176 +++++-
src/nvidia/src/kernel/gpu/nvlink/kernel_nvlink.c | 22 +-
src/nvidia/src/kernel/gpu/nvlink/kernel_nvlinkcorelibtrain.c | 2 +-
src/nvidia/src/kernel/mem_mgr/gpu_vaspace.c | 4 +-
src/nvidia/src/kernel/mem_mgr/mem_fabric.c | 15 +-
src/nvidia/src/kernel/rmapi/client_resource.c | 7 +-
src/nvidia/src/kernel/virtualization/kernel_vgpu_mgr.c | 5 +-
src/nvidia/src/libraries/mmu/mmu_walk.c | 5 +-
src/nvidia/srcs.mk | 2 +
version.mk | 2 +-
114 files changed, 7240 insertions(+), 830 deletions(-)

[ Other info ]
This is a rebuild of the package from sid with no further changes.

Andreas

[Adam D. Barratt]

Control: tags -1 + confirmed

On Sat, 2023-11-25 at 19:59 +0100, Andreas Beckmann wrote:
> In order to fix CVE-2023-31022 we need to upgrade
> nvidia-open-gpu-kernel-modules to a new upstream release.
> (This package must match the version of src:nvidia-graphics-drivers
> and/or src:nvidia-graphics-drivers-tesla to be useful, and these two
> packages in non-free need to be updated for CVE-2023-31022, too.)

Please go ahead.

Regards,

Adam

[Adam D Barratt]

package release.debian.org
tags 1056741 = bookworm pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian bookworm.

Thanks for your contribution!

Upload details
==============

Package: nvidia-open-gpu-kernel-modules
Version: 525.147.05-1~deb12u1

Explanation: new upstream release; fix null pointer dereference issue [CVE-2023-31022]