This bug was fixed in the package linux-aws - 4.15.0-1045.47 --------------- linux-aws (4.15.0-1045.47) bionic; urgency=medium
* CVE-2019-1125 - x86/cpufeatures: Carve out CQM features retrieval - x86/cpufeatures: Combine word 11 and 12 into a new scattered features word - x86/speculation: Prepare entry code for Spectre v1 swapgs mitigations - x86/speculation: Enable Spectre v1 swapgs mitigations - x86/entry/64: Use JMP instead of JMPQ - x86/speculation/swapgs: Exclude ATOMs from speculation through SWAPGS * CVE-2018-12126 // CVE-2018-12127 // CVE-2018-12130 // CVE-2019-11091 - SAUCE: Synchronize MDS mitigations with upstream * add support for Amazon Graviton PCIe controller (LP: #1834962) - PCI: al: Add Amazon Annapurna Labs PCIe host controller driver - SAUCE: [aws] irqchip/gic-v2m: invoke from gic-v3 initialization and add acpi quirk flow - SAUCE: [aws] arm64: acpi/pci: invoke _DSM whether to preserve firmware PCI setup * linux-aws builds modules which are not shipped (LP: #1836706) - [Packaging] Start shipping modules-extra -- Kleber Sacilotto de Souza <kleber.so...@canonical.com> Fri, 02 Aug 2019 14:16:59 +0200 ** Changed in: linux-aws (Ubuntu Bionic) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12126 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12127 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12130 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-11091 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux-aws in Ubuntu. https://bugs.launchpad.net/bugs/1836706 Title: linux-aws builds modules which are not shipped Status in linux-aws package in Ubuntu: In Progress Status in linux-aws source package in Xenial: Fix Committed Status in linux-aws source package in Bionic: Fix Released Status in linux-aws source package in Disco: Fix Released Bug description: [SRU Justification] == Impact == The build of AWS kernels currently is set up in a way that, like the generic kernel, builds a larger number of modules than it actually provides in the main modules package. However, unlike the generic kernel, it does not provide a linux-modules-extra which contains all those built modules. So there is no way for users to get modules which were deemed unnecessary in the AWS cloud space. But this also causes problems in cases where out of tree modules are being tried to compile. Those will configure themselves based on the provided config and then might depend on functionality which is provided in some module that is not part of the non-extra set. == Fix == To fix this, but also to get all of the kernels aligned, the AWS kernel should start to provide a linux-modules-extra which contains all those modules not shipped in the main modules packages. Since the default linux-aws meta package is supposed to only install the minimal set, there needs to be a linux-modules-extra-aws meta package which keeps the extra modules in sync with the kernel. == Testcase == sudo apt-get install linux-modules-extra-aws This should download and install additional kernel modules. == Risk of Regression == Low, this will start to ship an additional package which is not installed by default. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux-aws/+bug/1836706/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp