Attempting to patch crash-kmp-default fails with error missing ksym(default:__x86_return_thunk) = 5b8239ca

This document (000020870) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12 Support Pack 5
SUSE Linux Enterprise Live patching

Situation

When running kernel live patch, when attempting to apply patch:CL-SUSE-SLE-SERVER-12-SP5-2022-2576-1.noarch the update fails due to missing ksym(default:__x86_return_thunk) = 5b8239ca with error :

Problem: patch:CL-SUSE-SLE-SERVER-12-SP5-2022-2576-1.noarch conflicts with crash-kmp-default.x86_64 < 7.2.1_k4.12.14_122.127-8.19.2 provided by crash-kmp-default-7.2.1_k4.12.14_122.124-8.16.1.x86_64

Resolution

Apply kernel patch SUSE-SLE-SERVER-12-SP5-2022-2382 or later for SUSE Linux Enterprise server 12 Service Pack 5 to get missing symbols for crash-kmp-default to correctly patch.

Cause

The patch SUSE-SLE-SERVER-12-SP5-2022-2382 introduced new dependencies for the crash-kmp-default module that are not present in the latest kernel live patches for SLES 12SP5 kernel 7.2.1_k4.12.14_122.124-8.16.1.

Additional Information

Problem: nothing provides ksym(default:__x86_return_thunk) = 5b8239ca needed by crash-kmp-default-7.2.1_k4.12.14_122.127-8.19.2.x86_64 which was introduced as part of Retbleed mitigations.

Workaround to prevent the package from being updated until the kernel patches can be installed:
Option 1 Lock the crash-kmp-default package from being updated using zypper:
On the client: run `zypper addlock crash-kmp-default`

Option 2 from the SUMA server for each client affected using salt:
'salt <client-name> pkg.add_lock crash-kmp-default'

This will lock the rpm database so that this package is not updated.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.