Bug 2062349 - [4.10.z] [tracker] nf_reinject calls nf_queue_entry_free on an already freed entry->state
Summary: [4.10.z] [tracker] nf_reinject calls nf_queue_entry_free on an already freed ...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: RHCOS
Version: 4.7
Hardware: x86_64
OS: Linux
medium
medium
Target Milestone: ---
: 4.10.z
Assignee: Micah Abbott
QA Contact: Michael Nguyen
URL:
Whiteboard:
Depends On: 2054705 2061445
Blocks: 2062351 2062352 2062354
TreeView+ depends on / blocked
 
Reported: 2022-03-09 15:44 UTC by Micah Abbott
Modified: 2022-07-07 19:58 UTC (History)
15 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 2054705
: 2062351 (view as bug list)
Environment:
Last Closed: 2022-05-02 18:38:50 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2022:1601 0 None None None 2022-05-02 18:39:10 UTC

Comment 1 Luca BRUNO 2022-04-27 10:03:14 UTC 
The RHEL8 kernel BZ (https://bugzilla.redhat.com/show_bug.cgi?id=2061445) was fixed as part of https://access.redhat.com/errata/RHSA-2022:1455 with package version 'kernel-4.18.0-305.45.1.el8_4'.

The fixed kernel landed in (nightly) RHCOS 410.84.202204251448-0 and will appear in an upcoming OCP 4.10.z release.
Comment 2 Micah Abbott 2022-04-27 14:09:56 UTC 
The fixed RHCOS build first appeared in https://amd64.ocp.releases.ci.openshift.org/releasestream/4.10.0-0.nightly/release/4.10.0-0.nightly-2022-04-26-204343
Comment 3 Thiago Alessio Pereira 2022-04-27 14:15:41 UTC 
And that's precisely the nightly being used to create 4.10.12. Plus, @mnguyen verified them. Moving this BZ to VERIFIED and attaching it to 4.10.12's payload advisory.
Comment 5 Michael Nguyen 2022-04-27 16:29:24 UTC 
$ oc get clusterversion
NAME      VERSION                              AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.10.0-0.nightly-2022-04-27-034457   True        False         81m     Cluster version is 4.10.0-0.nightly-2022-04-27-034457
$ oc get node
NAME                                       STATUS   ROLES    AGE   VERSION
ci-ln-v07d6v2-72292-svvsl-master-0         Ready    master   99m   v1.23.5+70fb84c
ci-ln-v07d6v2-72292-svvsl-master-1         Ready    master   99m   v1.23.5+70fb84c
ci-ln-v07d6v2-72292-svvsl-master-2         Ready    master   99m   v1.23.5+70fb84c
ci-ln-v07d6v2-72292-svvsl-worker-a-g7zgp   Ready    worker   89m   v1.23.5+70fb84c
ci-ln-v07d6v2-72292-svvsl-worker-b-64bhp   Ready    worker   89m   v1.23.5+70fb84c
ci-ln-v07d6v2-72292-svvsl-worker-c-4kdd7   Ready    worker   89m   v1.23.5+70fb84c
$ oc debug node/ci-ln-v07d6v2-72292-svvsl-worker-a-g7zgp
Starting pod/ci-ln-v07d6v2-72292-svvsl-worker-a-g7zgp-debug ...
To use host binaries, run `chroot /host`


Pod IP: 10.0.128.4
If you don't see a command prompt, try pressing enter.

sh-4.4# sh-4.4# 
sh-4.4# chroot /host
sh-4.4# rpm-ostree status
State: idle
Deployments:
* pivot://quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:63364747637b0e0b595e709e8192f3010240f08936be0370be0072bb4b447e43
              CustomOrigin: Managed by machine-config-operator
                   Version: 410.84.202204261500-0 (2022-04-26T15:03:46Z)

  ostree://b1529f891c792557fd28e040870ab4b8220e65c5416427032701d21147815293
                   Version: 410.84.202201251210-0 (2022-01-25T12:13:24Z)
sh-4.4# rpm -q kernel
kernel-4.18.0-305.45.1.el8_4.x86_64
Comment 7 errata-xmlrpc 2022-05-02 18:38:50 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (OpenShift Container Platform 4.10.12 bug fix update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:1601
Note You need to log in before you can comment on or make changes to this bug.