Bug#1087482: bookworm-pu: package nvidia-open-gpu-kernel-modules/535.216.01-1~deb12u1

Andreas Beckmann anbe at debian.org
Thu Nov 14 08:40:32 GMT 2024


Package: release.debian.org
Severity: normal
Tags: bookworm
User: release.debian.org at packages.debian.org
Usertags: pu
X-Debbugs-Cc: nvidia-open-gpu-kernel-modules at packages.debian.org
Control: affects -1 + src:nvidia-open-gpu-kernel-modules

[ Reason ]
In order to fix a CVE we need to update the nvidia driver stack to a new
upstream release. This request is for src:nvidia-open-gpu-kernel-modules.

[ Impact ]
Open CVEs in a proprietary GPU driver. (This update needs to happen
together with src:nvidia-graphics-drivers due to the shared used of the
firmware package.)

[ Tests ]
The module is only build-tested, anything else would require use of
NVIDIA GPU hardware.

[ Risks ]
Updating the NVIDIA driver stack to new upstream releases is an
established procedure in stable.

[ Checklist ]
  [*] *all* changes are documented in the d/changelog
  [.] I reviewed all changes and I approve them
      I haven't thoroughly reviewed the upstream diff.
  [*] attach debdiff against the package in (old)stable
  [*] the issue is verified as fixed in unstable

[ Changes ]
Besides the new upstream release there is a refresh of the patches (and
some additions) taken from src:nvidia-graphics-drivers. This contains
ppc64el bits which are theoretically not needed for this (amd64+arm64
only) driver, but removing them would increase packaging complexity.

For the upstream part (i.e. the equivalent of the blob in
src:nvidia-graphics-drivers) I'm only providing the diffstat:
 CHANGELOG.md                                                                |  12 +
 README.md                                                                   |   8 +-
 debian/bug-script                                                           |   4 +
 debian/changelog                                                            |  30 ++
 debian/control                                                              |   5 +-
 .../module/0002-conftest.sh-remove-empty-lines-from-uts_release-outp.patch  |   8 +-
 debian/patches/module/0034-fix-typos.patch                                  |  10 +-
 .../module/0037-import-pfn_valid-w-o-GPL-rcu_read_lock-unlock-from-v.patch  |  91 +++++
 .../module/0042-Log-an-error-message-when-nv_mem_client_init-fails-d.patch  |  29 ++
 .../module/0045-let-the-virt_addr_valid-macro-use-nv_pfn_valid-on-pp.patch  |  37 ++
 .../module/0046-backport-nv_get_kern_phys_address-changes-from-555.4.patch  |  25 ++
 debian/patches/module/bashisms.patch                                        |   2 +-
 debian/patches/module/cc_version_check-gcc5.patch                           |   2 +-
 debian/patches/module/conftest-prefer-arch-headers.patch                    |   2 +-
 debian/patches/module/conftest-verbose.patch                                |   3 +-
 debian/patches/module/fragile-ARCH.patch                                    |   6 +-
 debian/patches/module/{series.in => series}                                 |   4 +
 debian/patches/module/use-kbuild-compiler.patch                             |   2 +-
 debian/patches/module/use-kbuild-flags.patch                                |   2 +-
 debian/rules.defs                                                           |   3 +-
 debian/sync.sh                                                              |   2 +-
 kernel-open/Kbuild                                                          |   2 +-
 kernel-open/Makefile                                                        |   8 +-
 kernel-open/common/inc/nv-hypervisor.h                                      |  24 +-
 kernel-open/common/inc/nv-linux.h                                           |  16 +-
 kernel-open/common/inc/nv.h                                                 |   9 +-
 kernel-open/conftest.sh                                                     |  69 +++-
 kernel-open/nvidia-drm/nvidia-drm-drv.c                                     |   4 +
 kernel-open/nvidia-drm/nvidia-drm.Kbuild                                    |   1 +
 kernel-open/nvidia-modeset/nv-kthread-q.c                                   |   4 +-
 kernel-open/nvidia-modeset/nvidia-modeset-linux.c                           |   6 +-
 kernel-open/nvidia-uvm/nv-kthread-q-selftest.c                              |   4 +-
 kernel-open/nvidia-uvm/nv-kthread-q.c                                       |   4 +-
 kernel-open/nvidia-uvm/uvm_channel.c                                        |  24 +-
 kernel-open/nvidia-uvm/uvm_common.h                                         |   6 +-
 kernel-open/nvidia-uvm/uvm_gpu_access_counters.c                            |  16 +-
 kernel-open/nvidia-uvm/uvm_gpu_replayable_faults.c                          |  14 +-
 kernel-open/nvidia/linux_nvswitch.c                                         |   3 +-
 kernel-open/nvidia/nv-caps.c                                                |   2 +-
 kernel-open/nvidia/nv-dma.c                                                 |   4 +-
 kernel-open/nvidia/nv-ibmnpu.c                                              |   4 +-
 kernel-open/nvidia/nv-kthread-q.c                                           |   4 +-
 kernel-open/nvidia/nv-mmap.c                                                |   4 +-
 kernel-open/nvidia/nv-pci.c                                                 |  27 +-
 kernel-open/nvidia/nv-procfs.c                                              |   4 +-
 kernel-open/nvidia/nv.c                                                     |   6 -
 kernel-open/nvidia/nvidia.Kbuild                                            |   3 +-
 kernel-open/nvidia/nvlink_linux.c                                           |   1 +
 kernel-open/nvidia/os-interface.c                                           |   2 +-
 kernel-open/nvidia/os-mlock.c                                               |  24 +-
 src/common/displayport/inc/dp_configcaps.h                                  |   2 +-
 src/common/displayport/inc/dp_connector.h                                   |   3 +-
 src/common/displayport/inc/dp_connectorimpl.h                               |   8 +-
 src/common/displayport/inc/dp_deviceimpl.h                                  |   2 +
 src/common/displayport/src/dp_configcaps.cpp                                |   4 +-
 src/common/displayport/src/dp_connectorimpl.cpp                             |   2 +-
 src/common/displayport/src/dp_deviceimpl.cpp                                |   9 +
 src/common/displayport/src/dp_wardatabase.cpp                               |  12 +-
 src/common/inc/nvBldVer.h                                                   |  20 +-
 src/common/inc/nvUnixVersion.h                                              |   2 +-
 src/common/inc/swref/published/ampere/ga102/dev_falcon_v4.h                 |   2 +
 src/common/nvlink/interface/nvlink.h                                        |   3 +-
 src/common/nvlink/kernel/nvlink/core/nvlink_discovery.c                     |   5 +-
 src/common/nvlink/kernel/nvlink/interface/nvlink_ioctl_entry.c              |   2 +-
 src/common/nvlink/kernel/nvlink/interface/nvlink_kern_discovery_entry.c     |   6 +-
 src/common/nvlink/kernel/nvlink/nvlink_helper.h                             |   3 +-
 src/common/nvswitch/kernel/lr10/lr10.c                                      |   4 +-
 src/common/sdk/nvidia/inc/class/cl0000_notification.h                       |   2 +-
 src/common/sdk/nvidia/inc/class/cla084.h                                    |   1 +
 src/common/sdk/nvidia/inc/ctrl/ctrl0000/ctrl0000vgpu.h                      | 149 ++++++--
 src/common/sdk/nvidia/inc/ctrl/ctrl2080/ctrl2080nvlink.h                    |  89 ++++-
 src/common/sdk/nvidia/inc/ctrl/ctrl208f/ctrl208ffb.h                        |  27 +-
 src/common/sdk/nvidia/inc/ctrl/ctrla081.h                                   | 118 ++++--
 src/common/sdk/nvidia/inc/nv-hypervisor.h                                   |  24 +-
 src/common/shared/inc/nvdevid.h                                             |   3 +-
 src/common/uproc/os/common/include/liblogdecode.h                           |   3 +-
 src/common/uproc/os/libos-v3.1.0/lib/liblogdecode.c                         |  28 ++
 src/nvidia-modeset/src/nvkms-headsurface-ioctl.c                            |   4 +-
 src/nvidia/arch/nvalloc/common/inc/nvcst.h                                  |   6 +-
 src/nvidia/arch/nvalloc/unix/include/nv.h                                   |   9 +-
 src/nvidia/arch/nvalloc/unix/src/os-hypervisor.c                            | 698 +++++++++++-------------------------
 src/nvidia/arch/nvalloc/unix/src/osapi.c                                    |  11 +-
 src/nvidia/arch/nvalloc/unix/src/osinit.c                                   |   8 +
 src/nvidia/exports_link_command.txt                                         |   4 +-
 src/nvidia/generated/g_client_resource_nvoc.c                               |  22 +-
 src/nvidia/generated/g_client_resource_nvoc.h                               |  16 +-
 src/nvidia/generated/g_event_nvoc.h                                         |   2 +-
 src/nvidia/generated/g_kernel_gsp_nvoc.c                                    |  10 +
 src/nvidia/generated/g_kernel_gsp_nvoc.h                                    |  33 +-
 src/nvidia/generated/g_kernel_nvlink_nvoc.h                                 |   1 +
 src/nvidia/generated/g_kernel_vgpu_mgr_nvoc.h                               |  20 +-
 src/nvidia/generated/g_mem_nvoc.h                                           |   1 -
 src/nvidia/generated/g_os_nvoc.h                                            |   7 +-
 src/nvidia/generated/g_rpc-structures.h                                     |   8 +
 src/nvidia/generated/g_subdevice_diag_nvoc.h                                |   2 +-
 src/nvidia/generated/g_subdevice_nvoc.c                                     | 138 ++++---
 src/nvidia/generated/g_subdevice_nvoc.h                                     |  16 +
 src/nvidia/generated/g_vgpuconfigapi_nvoc.c                                 |  60 ++--
 src/nvidia/generated/g_vgpuconfigapi_nvoc.h                                 |  16 +-
 src/nvidia/inc/kernel/gpu/falcon/falcon_common.h                            |  10 +-
 src/nvidia/inc/libraries/utils/nvprintf.h                                   |   2 +-
 src/nvidia/interface/nvrm_registry.h                                        |  14 +-
 src/nvidia/kernel/inc/nvpcf.h                                               |   3 +-
 src/nvidia/src/kernel/gpu/fifo/kernel_channel_group_api.c                   |  11 +-
 src/nvidia/src/kernel/gpu/fifo/kernel_fifo.c                                |  12 +-
 src/nvidia/src/kernel/gpu/gpu_suspend.c                                     |  15 +
 src/nvidia/src/kernel/gpu/gr/arch/turing/kgraphics_tu102.c                  |   5 +
 src/nvidia/src/kernel/gpu/gr/kernel_graphics.c                              |   2 +-
 src/nvidia/src/kernel/gpu/gsp/arch/ampere/kernel_gsp_falcon_ga102.c         |  93 ++++-
 src/nvidia/src/kernel/gpu/gsp/arch/turing/kernel_gsp_tu102.c                |   2 +-
 src/nvidia/src/kernel/gpu/gsp/kernel_gsp.c                                  | 269 +++++++-------
 src/nvidia/src/kernel/gpu/nvlink/arch/volta/kernel_nvlink_gv100.c           |   3 +-
 src/nvidia/src/kernel/gpu/nvlink/common_nvlinkapi.c                         |   4 +-
 src/nvidia/src/kernel/gpu/nvlink/kernel_nvlink.c                            |   3 +-
 src/nvidia/src/kernel/gpu/nvlink/kernel_nvlinkcorelibtrain.c                |  46 ++-
 src/nvidia/src/kernel/gpu/rc/kernel_rc_notification.c                       |  12 +-
 src/nvidia/src/kernel/gpu/subdevice/subdevice_ctrl_event_kernel.c           |   1 -
 src/nvidia/src/kernel/rmapi/client_resource.c                               |  38 +-
 src/nvidia/src/kernel/rmapi/event.c                                         |   8 +-
 src/nvidia/src/kernel/virtualization/kernel_vgpu_mgr.c                      |  19 +-
 src/nvidia/src/kernel/virtualization/vgpuconfigapi.c                        |  21 +-
 version.mk                                                                  |   2 +-
 122 files changed, 1700 insertions(+), 1106 deletions(-)

[ Other info ]
This is a rebuild of the package from sid with no further changes.

Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nvidia-open-gpu-kernel-modules_535.216.01-1~deb12u1.patch.xz
Type: application/x-xz
Size: 5896 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-nvidia-devel/attachments/20241114/2726f3ea/attachment.xz>


More information about the pkg-nvidia-devel mailing list