Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 651332 - RHEL6.1: EHCI: AMD periodic frame list table quirk
RHEL6.1: EHCI: AMD periodic frame list table quirk
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: kernel (Show other bugs)
6.1
All Linux
low Severity medium
: beta
: ---
Assigned To: Don Zickus
Petr Beňas
:
Depends On:
Blocks: 651333 651334 661870
  Show dependency treegraph
 
Reported: 2010-11-09 04:45 EST by Shane Huang
Modified: 2015-01-04 17:59 EST (History)
8 users (show)

See Also:
Fixed In Version: kernel-2.6.32-112.el6
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 651333 651334 (view as bug list)
Environment:
Last Closed: 2011-05-23 16:28:35 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)
ehci_frame_list_fix_RHEL6.patch (4.41 KB, patch)
2010-11-23 04:46 EST, Andiry
no flags Details | Diff


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2011:0542 normal SHIPPED_LIVE Important: Red Hat Enterprise Linux 6.1 kernel security, bug fix and enhancement update 2011-05-19 07:58:07 EDT

  None (edit)
Description Shane Huang 2010-11-09 04:45:47 EST
On AMD SB700/SB800/Hudson-2/3 platforms, USB EHCI controller may read/write
to memory space not allocated to USB controller if there is longer than
normal latency on DMA read encountered. In this condition the exposure will
be encountered only if the driver has following format of Periodic Frame
List link pointer structure:

For any idle periodic schedule, the Frame List link pointers that have the
T-bit set to 1 intending to terminate the use of frame list link pointer
as a physical memory pointer.

Idle periodic schedule Frame List Link pointer shoule be in the following
format to avoid the issue:

Frame list link pointer should be always contains a valid pointer to a
inactive QHead with T-bit set to 0.

Steps to Reproduce:
It is SW workaround of HW issue, it is difficult to reproduce from driver
point.

Patch has been accepted by EHCI maintainer:
http://www.spinics.net/lists/linux-usb/msg38405.html
http://www.spinics.net/lists/linux-usb/msg38414.html
Comment 1 Shane Huang 2010-11-09 04:47:33 EST
We will provide the git link here once it is available,
suppose the patch will appear from kernel 2.6.37 if everything is ok.
Comment 3 Andiry 2010-11-23 04:46:30 EST
Created attachment 462284 [details]
ehci_frame_list_fix_RHEL6.patch
Comment 4 Andiry 2010-11-23 04:47:50 EST
Please find the patch attached.
Comment 5 Don Zickus 2010-12-15 11:50:52 EST
I haven't seen this patch make it upstream?  Is it queued for 2.6.38 instead?

Cheers,
Don
Comment 6 Shane Huang 2010-12-15 22:13:14 EST
Here is the git link, which will appear from 2.6.37:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=3d091a6f703906c5680855ff29bd94d051c8c6d8

Please help to add it into RHEL6.x kernel, thanks
Comment 7 Don Zickus 2010-12-16 10:09:56 EST
Ok. thanks.  I have no idea how I missed that when I was looking through the upstream changelogs.

Cheers,
Don
Comment 9 RHEL Product and Program Management 2010-12-20 15:50:18 EST
This request was evaluated by Red Hat Product Management for inclusion
in a Red Hat Enterprise Linux maintenance release. Product Management has 
requested further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed 
products. This request is not yet committed for inclusion in an Update release.
Comment 10 Aristeu Rozanski 2011-02-03 11:16:13 EST
Patch(es) available on kernel-2.6.32-112.el6
Comment 13 Shane Huang 2011-03-01 08:39:51 EST
Verified OK with kernel-2.6.32-112.el6 x86_64
Comment 15 Petr Beňas 2011-04-28 06:48:36 EDT
Verified in 2.6.32-128.el6.x86_64.
Comment 16 errata-xmlrpc 2011-05-23 16:28:35 EDT
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0542.html

Note You need to log in before you can comment on or make changes to this bug.