我的學習手記 A technical geek blog: Bug

Error log: sisap_uc_uevent: fp was DELETED xxxxxxxxxxxxxxxxx, pid xxxx, fid xxxxxx leaving with ret=1, waiting=63, nsq=0, wait_scan=54, filename=noname

Issue: After upgrading the Endpoint Protection client to 14.3 RU6 (14.3.2509.6000), Linux machines running the agent may get into a hung state. In the /var/log/messages file, you will see the following types of error messages: sisap_uc_uevent: fp was DELETED

Affected and matched to our current running SEP version: Symantec Endpoint Protection (SEPM) 14.3.2509.6000

Resolution: Upgrade the agent to the latest version (14.3.2529.6000 or later).

Reference: Linux servers hang after upgrading to SEP 14.3 RU6 (broadcom.com)

If you plan to upgrade to 14.3 RU8 to resolve this issue.
Before you upgrade to 14.3 RU8, 
 you need to check the Kernel version is it on support list. 
 https://linux-repo.us.securitycloud.symantec.com/SAL/1.3/seplinux_supported_kernels.html  
 After the upgrade, you should to follow the following steps to check: 
 (A scheduled downtime is required)

Symantec_SEP_(DC_2.0).pdf (hicloud.net.tw)

https://s3.hicloud.net.tw/ndc/ndc_form/Symantec_SEP_%E5%AE%89%E8%A3%9D%E6%A8%99%E6%BA%96%E4%BD%9C%E6%A5%AD%E7%A8%8B%E5%BA%8F%E6%9B%B8(DC_2.0).pdf

Wednesday, March 13, 2024

Aruba AP running on 10.4.0.2 or above hit a horrible bug which is rebooted unexpectedly

Solution:

Upgrade to 10.4.1.0 or above.

Resolved Issues in ArubaOS 10.4.1.0 (arubanetworks.com)

Recommend to upgrade to 10.4.1.1 since 10.4.1.0 also have another reason to crashed and reboot unexpectedly.

Resolved Issues in ArubaOS 10.4.1.1 (arubanetworks.com)

Saturday, September 9, 2023

How to fix the 22.04.3 default wallpaper incorrect after upgrade from 20.04

There are minor bug I hit, the wallpaper did not update ot 22.04.3 LTS default one.

I resolve it by change it from .png to .jpg one and apply the setting. (After that, you can change it back to .png one)

More about Lubuntu:

https://hackmd.io/@yizhewang/SkfJGOWvD

https://wiki.ubuntu.org.cn/Lubuntu

https://linux.cn/article-12242-1.html

http://www.mintos.org/distro/lubuntu-focal.html

https://www.mycomputertips.co.uk/115

Thursday, August 1, 2019

Nokia 5.1 Plus–WiFi hotspot bugs - turn off your hotspot if no devices are connected

When you turn on this feature, another device will not able to connect to this hotspot.

Workaround:

Disable this feature.

Saturday, January 13, 2018

Surface Laptop cannot wake up after the run out all the power (drained battery) even you charge it up again

Solution: After you connect the AC power again for several hours, press the “power button” and “+” at the same time, it will wake up again

Saturday, January 6, 2018

SpecuCheck a research tool and is not recommended for general use

SpecuCheck is only a research tool and is not recommended for general use -- please use the Microsoft-approved PowerShell Module instead.

https://github.com/ionescu007/SpecuCheck

Massive Intel CPU Bug Leaves Kernel Vulnerable, Slows Performance - Intel CPU kernel memory leak vulnerability #Spectre (CVE-2017-5753 , CVE-2017-5715) and #Meltdown (CVE-2017-5754) #SideChannelAttack

Friday, January 5, 2018

Massive Intel CPU Bug Leaves Kernel Vulnerable, Slows Performance - Intel CPU kernel memory leak vulnerability #Spectre (CVE-2017-5753 , CVE-2017-5715) and #Meltdown (CVE-2017-5754) #SideChannelAttack

The hotfix from Microsoft, RedHat and VMware at the following:

platform	solution
Windows2008	Not available	https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution-s
Windows2008R2	KB4056897	https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution-s
Windows2012	Not available	https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution-s
Windows2012R2	KB4056898	https://support.microsoft.com/en-us/help/4072698/windows-server-guidance-to-protect-against-the-speculative-execution-s
ESXi5.5	ESXi550-201709101-SG	https://www.vmware.com/security/advisories/VMSA-2018-0002.html
ESXi6.5	ESXi650-201712101-SG	https://www.vmware.com/security/advisories/VMSA-2018-0002.html
Redhat7	RHSA-2018:0007	https://access.redhat.com/security/vulnerabilities/speculativeexecution
Redhat6	RHSA-2018:0008	https://access.redhat.com/security/vulnerabilities/speculativeexecution

For windows patch deployment, if using Mcafee, it need to update register key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat" first.

https://support.microsoft.com/en-us/help/4056898

WINDOWS
About the intel vulnerability on Windows (not Azure specific), pls find our published info and patches below.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV180002
Update for Windows Server 2016 is available here:
https://support.microsoft.com/en-us/help/4056890
Windows 10 1709 (Fall Creators Update):
https://support.microsoft.com/en-us/help/4056892
Updates for other OS versions:
http://www.catalog.update.microsoft.com/Search.aspx?q=2018-01

Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities

https://support.microsoft.com/en-us/help/4073119/windows-client-guidance-for-it-pros-to-protect-against-speculative-exe?ranMID=24542&ranEAID=nOD%2FrLJHOac&ranSiteID=nOD_rLJHOac-9l5jOPaPqmkvZwSt.6rR0w&tduid=(72882831a6cc2b13e2bb4cdc8c5e787f)(256380)(2459594)(nOD_rLJHOac-9l5jOPaPqmkvZwSt.6rR0w)()

RedHat Enterprise Linux:
The vulnerability has been assigned CVE-2017-5754, CVE-2017-5753 & CVE-2017-5715. This issue was publicly disclosed on Wednesday, January 3, 2018 and is rated as Important [1].
Kernel Side-Channel Attacks (CVE-2017-5754, CVE-2017-5753, & CVE-2017-5715)
https://access.redhat.com/security/vulnerabilities/speculativeexecution

Reference:
https://www.extremetech.com/computing/261364-massive-intel-cpu-bug-leaves-kernel-vulnerable-reduce-performance
https://www.theregister.co.uk/2018/01/02/intel_cpu_design_flaw/
https://www.theverge.com/2018/1/3/16844630/intel-processor-security-flaw-bug-kernel-windows-linux
https://www.techpowerup.com/240174/intel-secretly-firefighting-a-major-cpu-bug-affecting-datacenters
https://news.xfastest.com/intel/44421/intel-memory-leak-bug/
https://hothardware.com/news/intel-cpu-bug-kernel-memory-isolation-linux-windows-macos

There are more detail about the vulnerability:
Google Project Zero blog:
https://googleprojectzero.blogspot.hk/2018/01/reading-privileged-memory-with-side.html
Research paper:
https://spectreattack.com/spectre.pdf
https://meltdownattack.com/meltdown.pdf

Reference:
http://blog.cyberus-technology.de/posts/2018-01-03-meltdown.html
AMD Respond:
http://www.amd.com/en/corporate/speculative-execution
ARM Security:
https://developer.arm.com/support/security-update
Meltdown in Action: Dumping memory
https://m.youtube.com/watch?v=bReA1dvGJ6Y

Spectre and Meltdown processor security flaws – explained

https://www.theguardian.com/technology/2018/jan/04/meltdown-spectre-computer-processor-intel-security-flaws-explainer

How to protect your PC against the major ‘Meltdown’ CPU security flaw

https://www.theverge.com/2018/1/4/16848976/how-to-protect-windows-pc-meltdown-security-flaw

#Spectre #CVE20175715 #CVE20175753
#Meltdown #CVE20175754
#SideChannelAttack

Pages

Wednesday, December 31, 2025

Saturday, September 20, 2025

Thursday, April 4, 2024

Thursday, March 28, 2024

Wednesday, March 13, 2024

Saturday, September 9, 2023

Thursday, August 1, 2019

Saturday, January 13, 2018

Saturday, January 6, 2018

Massive Intel CPU Bug Leaves Kernel Vulnerable, Slows Performance - Intel CPU kernel memory leak vulnerability #Spectre (CVE-2017-5753 , CVE-2017-5715) and #Meltdown (CVE-2017-5754) #SideChannelAttack

Friday, January 5, 2018

Windows Client Guidance for IT Pros to protect against speculative execution side-channel vulnerabilities