[Bug 2045322] Re: linux-image-5.4.0-1024-fips - boots to kernel panic on AMD EPYC 7262 CPU - drbg_nopr_sha512

** Changed in: linux (Ubuntu)
Assignee: (unassigned) => gerald.yang (gerald-yang-tw)

** Changed in: linux (Ubuntu)
Status: New => In Progress

--
You received this bug notification because you are subscribed to linux
in Ubuntu.
Matching subscriptions: Bgg, Bmail, Nb
https://bugs.launchpad.net/bugs/2045322

Title:
linux-image-5.4.0-1024-fips - boots to kernel panic on AMD EPYC 7262
CPU - drbg_nopr_sha512

Status in linux package in Ubuntu:
In Progress

Bug description:
On a stock/default installation of Ubuntu 20.04.6LTS with Ubuntu Pro
activated, running pro enable fips on a system with an AMD EPYC 7262
results in a kernel panic during boot. Issue not reproducible on Intel
processors.

Kernel panic - not syncing: random: Failed to reset DRBG
(drbg_nopr_sha512): -2

Will include full screenshot of kernel panic as an attachment to this
report.

How the system was built:
Hardware: HPE Proliant DL385Gen10 with an EPYC 7262 processor, running VMware ESXi 7.0u3.
Using the latest ISO ubuntu-20.04.6-live-server-amd64.iso to install a stock installation (choose the defaults all the way through the setup) of Ubuntu in a VMware ESXi 7.0u3 virtual machine.
Once the setup is completed and the system reboots into the newly installed system, I run apt-get update, apt-get upgrade, apt-get dist-upgrade, to apply all updates and reboot.
Then, I run: pro enable fips, press Y to confirm the installation, and reboot once it says to reboot to apply FIPS settings.

System boots into kernel panic.
Editing grub entry for the same kernel to change fips=1 to fips=0 bypasses the kernel panic and allows the system to boot normally.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2045322/+subscriptions