21405ae9b0
- edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-64642] - Resolves: RHEL-64642 ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater [rhel-10])
48 lines
1.7 KiB
Diff
48 lines
1.7 KiB
Diff
From 4a770a9b67b67e1254f42ca00c077f9263be7f4c Mon Sep 17 00:00:00 2001
|
|
From: Oliver Steffen <osteffen@redhat.com>
|
|
Date: Mon, 4 Nov 2024 19:00:11 +0100
|
|
Subject: [PATCH] OvmfPkg: Rerun dispatcher after initializing virtio-rng
|
|
|
|
RH-Author: Oliver Steffen <osteffen@redhat.com>
|
|
RH-MergeRequest: 83: OvmfPkg: Rerun dispatcher after initializing virtio-rng
|
|
RH-Jira: RHEL-64642
|
|
RH-Acked-by: Gerd Hoffmann <kraxel@redhat.com>
|
|
RH-Commit: [1/1] 90757b4268b841637cbd08ac94f0febe9cfdffa5 (osteffen/edk2)
|
|
|
|
Upstream PR: https://github.com/tianocore/edk2/pull/6403
|
|
|
|
Since the pixiefail CVE fix the network stack requires a hardware
|
|
random number generator. This can currently be a modern CPU supporting
|
|
the RDRAND instruction or a virtio-rng device.
|
|
The latter is initialized during the BDS phase.
|
|
To ensure all depending (network) modules are also started, we need to
|
|
run the dispatcher once more after the device was initialized.
|
|
Without this, network boot is not available under certain hardware
|
|
configurations.
|
|
|
|
Fixes: 4c4ceb2ceb ("NetworkPkg: SECURITY PATCH CVE-2023-45237")
|
|
|
|
Analysed-by: Stefano Garzarella <sgarzare@redhat.com>
|
|
Suggested-by: Gerd Hoffmann <kraxel@redhat.com>
|
|
Signed-off-by: Oliver Steffen <osteffen@redhat.com>
|
|
---
|
|
OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
|
|
diff --git a/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c b/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c
|
|
index 87d1ac3142..1f1298eb0b 100644
|
|
--- a/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c
|
|
+++ b/OvmfPkg/Library/PlatformBootManagerLib/BdsPlatform.c
|
|
@@ -675,6 +675,8 @@ ConnectVirtioPciRng (
|
|
if (EFI_ERROR (Status)) {
|
|
goto Error;
|
|
}
|
|
+
|
|
+ gDS->Dispatch ();
|
|
}
|
|
|
|
return EFI_SUCCESS;
|
|
--
|
|
2.39.3
|
|
|