bugGNU GRUB - Bugs: bug #46707, double free when kernel does not...


You are not allowed to post comments on this tracker with your current authentication level.

bug #46707: double free when kernel does not match secure boot key

Submitted by:  Linus Torvalds <torvalds>
Submitted on:  Thu 17 Dec 2015 11:18:26 PM UTC  
Category:  Booting Severity:  Major
Priority:  3 - Low Item Group:  Software Error
Status:  None Privacy:  Public
Assigned to:  None Originator Name:  Linus Torvalds
Open/Closed:  Open Release: 
Release:  2.02~beta1 Reproducibility:  Every Time
Planned Release:  2.03+

Fri 18 Dec 2015 03:13:06 AM UTC, comment #1:

The code in question (secure boot) is fedora-specific. We don't currently support this functionality upstream. I'll keep the bug open as a reminder to look into it during patch uplift

Vladimir Serbinenko <phcoder>
Project Administrator
Thu 17 Dec 2015 11:18:26 PM UTC, original submission:

I already submitted this to the Fedora bugzilla, since it happens wioth the F23 grub, which seems to be based on some 2.02 prerelease.

It may be Fedora-specific, but since I tend to try making upstream reports too, here goes..

When I installed Fedora 23 on my new desktop machine everything worked fine. I then built my own kernel (of course), and tried to boot it, but I never got into the kernel, because grub2 failed with:

double free at 0x616f5760
Aborted. Press any key to edit.

which is not very helpful, and is obviously a Grub bug.

However, booting the Fedora kernel worked fine, so I screatched my head for a while, and then realized that I had never touched the BIOS secure boot settings - and I don't sign my kernels with some silly vendor signature.

And sure enough, when I disable secure boot, Grub2 works fine.

So clearly Grub2 does not handle secure boot key failures very gracefully. I don't expect you to actually boot the kernel, but I would expect a useful error message, rather than a bug about double free's. Something like

Not able to boot unsigned kernel in secure mode.
Aborted. Press any key to edit.

..and hey, if this is all just the Fedora version of Grub2, you can ignore this bug report, of course.

Linus Torvalds <torvalds>


No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by phcoder (Posted a comment)
  • -email is unavailable- added by torvalds (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2016-10-11 phcoder Priority5 - Normal => 3 - Low
    2016-03-02 phcoder Planned ReleaseNone => 2.03+

    Back to the top

    Powered by Savane 3.3