You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
38 lines
1.5 KiB
38 lines
1.5 KiB
3 weeks ago
|
From 8f117e06457536a78feeee1e49c43ca435d94842 Mon Sep 17 00:00:00 2001
|
||
|
1 month ago
|
From: Oliver Steffen <osteffen@redhat.com>
|
||
|
|
Date: Mon, 4 Nov 2024 19:00:11 +0100
|
||
|
|
Subject: [PATCH] OvmfPkg: Rerun dispatcher after initializing virtio-rng
|
||
|
|
|
||
|
|
Since the pixiefail CVE fix the network stack requires a hardware
|
||
|
|
random number generator. This can currently be a modern CPU supporting
|
||
|
|
the RDRAND instruction or a virtio-rng device.
|
||
|
|
The latter is initialized during the BDS phase.
|
||
|
|
To ensure all depending (network) modules are also started, we need to
|
||
|
|
run the dispatcher once more after the device was initialized.
|
||
|
|
Without this, network boot is not available under certain hardware
|
||
|
|
configurations.
|
||
|
|
|
||
|
|
Fixes: 4c4ceb2ceb ("NetworkPkg: SECURITY PATCH CVE-2023-45237")
|
||
|
|
|
||
|
|
Analysed-by: Stefano Garzarella <sgarzare@redhat.com>
|
||
|
|
Suggested-by: Gerd Hoffmann <kraxel@redhat.com>
|
||
|
|
Signed-off-by: Oliver Steffen <osteffen@redhat.com>
|
||
|
3 weeks ago
|
(cherry picked from commit 9c4542a0645ac832e22d0c3da0f1ee7b127a316f)
|
||
|
1 month ago
|
---
|
||
|
|
OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c | 2 ++
|
||
|
|
1 file changed, 2 insertions(+)
|
||
|
|
|
||
|
|
diff --git a/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c b/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c
|
||
|
|
index 87d1ac3142..1f1298eb0b 100644
|
||
|
|
--- a/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c
|
||
|
|
+++ b/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c
|
||
|
|
@@ -675,6 +675,8 @@ ConnectVirtioPciRng (
|
||
|
|
if (EFI_ERROR (Status)) {
|
||
|
|
goto Error;
|
||
|
|
}
|
||
|
|
+
|
||
|
|
+ gDS->Dispatch ();
|
||
|
|
}
|
||
|
|
|
||
|
|
return EFI_SUCCESS;
|