Bug#1013096: linux-image-5.10.0-15-amd64: racoon reports AES missing
Package: linux-image-5.10.0-15-amd64
Version: 5.10.120-1
Severity: important
Hi
When i rebooted after upgrading to this kernel, setkey issued a ton of
complaints a la
Jun 16 22:58:01 brain setkey[312]: The result of line 10: No such process.
Jun 16 22:58:01 brain setkey[312]: The result of line 11: No such process.
Jun 16 22:58:01 brain setkey[312]: The result of line 19: No such process.
and racoon failed with
Jun 16 22:58:02 brain racoon: ERROR: Must get supported algorithms list first.
Jun 16 22:58:02 brain racoon: ERROR: /etc/racoon/racoon.conf:51: ";" algorithm AES not supported by the
kernel (missing module?)
Jun 16 22:58:02 brain racoon: ERROR: fatal parse failure (1 errors)
The only difference to my untrained eye between the kernel log messages
but the new kernel and the old (-13-amd64) is messages like this that
get logged by the old kernel:
Jun 16 23:14:21 brain kernel: [ 24.062688] AVX or AES-NI instructions are not detected.
Jun 16 23:14:21 brain kernel: [ 24.097466] AVX or AES-NI instructions are not detected.
Yes, I have older hardware, setkey and racoon are from old, obsolete
packages, etc., but just logging this in case it's an actual problem
with the kernel and not either of those old packages (mostly so any
folks seeing the same thing knows they are not alone).
This seems like a possibly related "upstream" bug report:
https://lore.kernel.org/stable/20220613143034.wbz7kqmijc5b5ge7@intra2net.com/
but it's for the 4.19 kernel series. This seems to be the same fix for
the 5.10 series:
https://lore.kernel.org/stable/20220613094921.659363970@linuxfoundation.org/
which seems to be queued for the 5.10.122 release, but it doesn't point
to anything which seems to line up with my observation about the difference
in kernel log messages on my system about missing AVS or AES-NI instructions
[shrug]
Anyways, thanks to the debian-kernel team for all your work, whether
this leads to any more of it or (likely) not.
--buck
-- System Information:
Debian Release: 11.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 5.10.0-13-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_US, LC_CTYPE=en_US.utf8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.utf8), LANGUAGE not set
Shell: /bin/sh linked to /bin/bash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-5.10.0-15-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.140
ii kmod 28-1
ii linux-base 4.6
Versions of packages linux-image-5.10.0-15-amd64 recommends:
ii apparmor 2.13.6-10
ii firmware-linux-free 20200122-1
Versions of packages linux-image-5.10.0-15-amd64 suggests:
pn debian-kernel-handbook <none>
ii grub-pc 2.04-20
pn linux-doc-5.10 <none>
Reply to: