-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package: src:linux
Version: 4.19.37-5+deb10u1
Severity: normal
X-Debbugs-Cc: el...@werberich.de
Dear Kernel Maintainer,
I found a reproducible bug which causes a linux kernel oops if
netfilter-persistence.service
tries to load IPv4 firewall rules on startup by calling iptables-restore with
the following
content as input:
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:MY-ICMP - [0:0]
- -A INPUT -j MY-ICMP
- -A MY-ICMP -p icmp -m icmp --icmp-type 3 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 11 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 8 -m limit --limit 4/sec -j ACCEPT
COMMIT
I was able to create this simple ruleset out of a more complex firewall
configuration.
This kernel oops appears on nine out of ten startups/reboots.
If it appears, iptables/nftables are not usable anymore.
For more details, consult kernel log.
Steps to reproduce the kernel oops:
# Install a fresh, minimal Debian 10 Buster system. (e.g. new VM)
$ apt update
$ apt install iptables iptables-persistent
# Save IPv4 rules on installation, do not save IPv6 rules.
$ cat << \EOF > /etc/iptables/rules.v4
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
:MY-ICMP - [0:0]
- -A INPUT -j MY-ICMP
- -A MY-ICMP -p icmp -m icmp --icmp-type 3 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 11 -j ACCEPT
- -A MY-ICMP -p icmp -m icmp --icmp-type 8 -m limit --limit 4/sec -j ACCEPT
COMMIT
EOF
$ reboot
You may need to reboot a second or third time, if it does not appear on the
first startup.
I was able to reproduce this on AMD64 using VirtualBox VM and a cloud server
provider.
It may cause a broken firewall configuration which leads to a security issue if
you reboot
without monitoring.
Using Debian Kernel "4.19.37-6" does not fix this bug.
Yours sincerely,
Elias Werberich
- - -- Package-specific info:
** Version:
Linux version 4.19.0-5-amd64 (debian-kernel@lists.debian.org) (gcc version
8.3.0 (Debian 8.3.0-6)) #1 SMP Debian 4.19.37-5+deb10u1 (2019-07-19)
** Command line:
BOOT_IMAGE=/boot/vmlinuz-4.19.0-5-amd64
root=UUID=4401db16-23d5-4976-b271-4cd53925c0b9 ro quiet
** Tainted: D (128)
* Kernel has oopsed before.
** Kernel log:
[ 2.896496] BUG: unable to handle kernel NULL pointer dereference at
0000000000000327
[ 2.896497] PGD 0 P4D 0
[ 2.896499] Oops: 0000 [#1] SMP PTI
[ 2.896506] CPU: 0 PID: 285 Comm: iptables-restor Not tainted 4.19.0-5-amd64
#1 Debian 4.19.37-5+deb10u1
[ 2.896507] Hardware name: innotek GmbH VirtualBox/VirtualBox, BIOS
VirtualBox 12/01/2006
[ 2.896512] RIP: 0010:module_put+0xe/0x80
[ 2.896513] Code: 8e 00 48 8b 4d 00 48 85 c9 75 e4 eb 98 66 66 2e 0f 1f 84
00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 85 ff 74 71 41 54 55 53 <8b> 87 28
03 00 00 89 c2 83 ea 01 78 61 f0 0f b1 97 28 03 00 00 75
[ 2.896514] RSP: 0018:ffffa4e0809ef990 EFLAGS: 00010286
[ 2.896515] RAX: ffff891f597f3a00 RBX: 0000000000000002 RCX: 0000000000000005
[ 2.896516] RDX: 0000000000000005 RSI: ffffffffc06a52d0 RDI: ffffffffffffffff
[ 2.896516] RBP: ffff891f582f8120 R08: 0000000000000000 R09: 0000000000000074
[ 2.896517] R10: ffffa4e0809ef8f8 R11: 0000000000000001 R12: 00000000000000a0
[ 2.896517] R13: 00000000fffffff5 R14: 0000000000000003 R15: ffffa4e0809efad8
[ 2.896518] FS: 00007f1be82c4740(0000) GS:ffff891f5ba00000(0000)
knlGS:0000000000000000
[ 2.896519] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2.896519] CR2: 0000000000000327 CR3: 000000011672e005 CR4: 00000000000606f0
[ 2.896521] Call Trace:
[ 2.896533] nf_tables_newrule+0x5e3/0x950 [nf_tables]
[ 2.896536] ? __handle_mm_fault+0xc62/0x1270
[ 2.896538] nfnetlink_rcv_batch+0x4aa/0x660 [nfnetlink]
[ 2.896540] ? nfnetlink_rcv_msg+0x13c/0x260 [nfnetlink]
[ 2.896545] ? __skb_try_recv_datagram+0xd6/0x180
[ 2.896548] ? refcount_inc_checked+0x5/0x30
[ 2.896550] ? apparmor_capable+0x72/0xa0
[ 2.896552] ? nla_parse+0x31/0xe0
[ 2.896553] nfnetlink_rcv+0x10c/0x141 [nfnetlink]
[ 2.896555] netlink_unicast+0x1bd/0x260
[ 2.896562] netlink_sendmsg+0x204/0x3d0
[ 2.896564] sock_sendmsg+0x36/0x40
[ 2.896567] ___sys_sendmsg+0x295/0x2f0
[ 2.896569] ? filemap_map_pages+0x360/0x3a0
[ 2.896571] ? refcount_inc_checked+0x5/0x30
[ 2.896571] ? apparmor_capable+0x72/0xa0
[ 2.896573] ? security_capable+0x35/0x50
[ 2.896575] ? release_sock+0x19/0x90
[ 2.896578] ? _raw_spin_unlock_bh+0xa/0x20
[ 2.896579] __sys_sendmsg+0x57/0xa0
[ 2.896582] do_syscall_64+0x53/0x110
[ 2.896587] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 2.896590] RIP: 0033:0x7f1be83c6914
[ 2.896591] Code: 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b5 0f 1f 80 00
00 00 00 48 8d 05 e9 5d 0c 00 8b 00 85 c0 75 13 b8 2e 00 00 00 0f 05 <48> 3d 00
f0 ff ff 77 54 c3 0f 1f 00 41 54 41 89 d4 55 48 89 f5 53
[ 2.896592] RSP: 002b:00007fffada99168 EFLAGS: 00000246 ORIG_RAX:
000000000000002e
[ 2.896593] RAX: ffffffffffffffda RBX: 00007fffada99180 RCX: 00007f1be83c6914
[ 2.896594] RDX: 0000000000000000 RSI: 00007fffada9a200 RDI: 0000000000000003
[ 2.896594] RBP: 00007fffada9a880 R08: 0000000000000004 R09: 0000000000000000
[ 2.896595] R10: 00007fffada9a1ec R11: 0000000000000246 R12: 000056216ab4eb40
[ 2.896595] R13: 00007fffada9d150 R14: 00007fffada99170 R15: 00007fffada9d188
[ 2.896596] Modules linked in: nft_limit vmwgfx(+) nft_counter
crct10dif_pclmul crc32_pclmul ttm xt_limit drm_kms_helper snd_intel8x0(+)
ghash_clmulni_intel snd_ac97_codec nft_compat ac97_bus intel_rapl_perf drm
snd_pcm snd_timer evdev joydev sg snd serio_raw pcspkr soundcore vboxguest
nf_tables battery nfnetlink ac video button ip_tables x_tables autofs4 ext4
crc16 mbcache jbd2 crc32c_generic fscrypto ecb sr_mod sd_mod cdrom hid_generic
usbhid hid crc32c_intel ahci xhci_pci libahci xhci_hcd libata aesni_intel
usbcore scsi_mod aes_x86_64 crypto_simd cryptd glue_helper psmouse usb_common
e1000 i2c_piix4
[ 2.896617] CR2: 0000000000000327
[ 2.896619] ---[ end trace 540ba13c8abe79e8 ]---
[ 2.896620] RIP: 0010:module_put+0xe/0x80
[ 2.896621] Code: 8e 00 48 8b 4d 00 48 85 c9 75 e4 eb 98 66 66 2e 0f 1f 84
00 00 00 00 00 0f 1f 40 00 0f 1f 44 00 00 48 85 ff 74 71 41 54 55 53 <8b> 87 28
03 00 00 89 c2 83 ea 01 78 61 f0 0f b1 97 28 03 00 00 75
[ 2.896621] RSP: 0018:ffffa4e0809ef990 EFLAGS: 00010286
[ 2.896622] RAX: ffff891f597f3a00 RBX: 0000000000000002 RCX: 0000000000000005
[ 2.896622] RDX: 0000000000000005 RSI: ffffffffc06a52d0 RDI: ffffffffffffffff
[ 2.896623] RBP: ffff891f582f8120 R08: 0000000000000000 R09: 0000000000000074
[ 2.896623] R10: ffffa4e0809ef8f8 R11: 0000000000000001 R12: 00000000000000a0
[ 2.896624] R13: 00000000fffffff5 R14: 0000000000000003 R15: ffffa4e0809efad8
[ 2.896625] FS: 00007f1be82c4740(0000) GS:ffff891f5ba00000(0000)
knlGS:0000000000000000
[ 2.896625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2.896626] CR2: 0000000000000327 CR3: 000000011672e005 CR4: 00000000000606f0
[ 2.991528] fbcon: svgadrmfb (fb0) is primary device
[ 2.993819] Console: switching to colour frame buffer device 100x37
[ 2.995764] [drm] Initialized vmwgfx 2.15.0 20180704 for 0000:00:02.0 on
minor 0
[ 3.036976] snd_intel8x0 0000:00:05.0: white list rate for 1028:0177 is 48000
[ 3.111403] IPv6: ADDRCONF(NETDEV_UP): enp0s8: link is not ready
[ 3.113781] IPv6: ADDRCONF(NETDEV_UP): enp0s3: link is not ready
[ 5.127519] e1000: enp0s8 NIC Link is Up 1000 Mbps Full Duplex, Flow
Control: RX
[ 5.128925] e1000: enp0s3 NIC Link is Up 1000 Mbps Full Duplex, Flow
Control: RX
[ 5.130060] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s8: link becomes ready
[ 5.130243] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s3: link becomes ready
** Model information
sys_vendor: innotek GmbH
product_name: VirtualBox
product_version: 1.2
chassis_vendor: Oracle Corporation
chassis_version:
bios_vendor: innotek GmbH
bios_version: VirtualBox
board_vendor: Oracle Corporation
board_name: VirtualBox
board_version: 1.2
** Loaded modules:
nft_limit
vmwgfx
nft_counter
crct10dif_pclmul
crc32_pclmul
ttm
xt_limit
drm_kms_helper
snd_intel8x0
ghash_clmulni_intel
snd_ac97_codec
nft_compat
ac97_bus
intel_rapl_perf
drm
snd_pcm
snd_timer
evdev
joydev
sg
snd
serio_raw
pcspkr
soundcore
vboxguest
nf_tables
battery
nfnetlink
ac
video
button
ip_tables
x_tables
autofs4
ext4
crc16
mbcache
jbd2
crc32c_generic
fscrypto
ecb
sr_mod
sd_mod
cdrom
hid_generic
usbhid
hid
crc32c_intel
ahci
xhci_pci
libahci
xhci_hcd
libata
aesni_intel
usbcore
scsi_mod
aes_x86_64
crypto_simd
cryptd
glue_helper
psmouse
usb_common
e1000
i2c_piix4
** Network interface configuration:
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug enp0s3
iface enp0s3 inet dhcp
allow-hotplug enp0s8
iface enp0s8 inet dhcp
** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP
group default qlen 1000
link/ether 08:00:27:08:22:2d brd ff:ff:ff:ff:ff:ff
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic enp0s3
valid_lft 85924sec preferred_lft 85924sec
inet6 fe80::a00:27ff:fe08:222d/64 scope link
valid_lft forever preferred_lft forever
3: enp0s8: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP
group default qlen 1000
link/ether 08:00:27:14:d2:d3 brd ff:ff:ff:ff:ff:ff
inet 10.251.3.103/24 brd 10.251.3.255 scope global dynamic enp0s8
valid_lft 725sec preferred_lft 725sec
inet6 fe80::a00:27ff:fe14:d2d3/64 scope link
valid_lft forever preferred_lft forever
*** Device statistics:
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes
packets errs drop fifo colls carrier compressed
enp0s8: 98149 1170 0 0 0 0 0 0 664351
1148 0 0 0 0 0 0
lo: 0 0 0 0 0 0 0 0 0
0 0 0 0 0 0 0
enp0s3: 463977 455 0 0 0 0 0 0 29036
288 0 0 0 0 0 0
** PCI devices:
00:00.0 Host bridge [0600]: Intel Corporation 440FX - 82441FX PMC [Natoma]
[8086:1237] (rev 02)
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR- INTx-
00:01.0 ISA bridge [0601]: Intel Corporation 82371SB PIIX3 ISA [Natoma/Triton
II] [8086:7000]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
00:02.0 VGA compatible controller [0300]: VMware SVGA II Adapter [15ad:0405]
(prog-if 00 [VGA controller])
Subsystem: VMware SVGA II Adapter [15ad:0405]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 18
Region 0: I/O ports at d000 [size=16]
Region 1: Memory at f0000000 (32-bit, non-prefetchable) [size=64M]
Region 2: Memory at f4000000 (32-bit, non-prefetchable) [size=2M]
[virtual] Expansion ROM at 000c0000 [disabled] [size=128K]
Kernel driver in use: vmwgfx
Kernel modules: vmwgfx
00:03.0 Ethernet controller [0200]: Intel Corporation 82540EM Gigabit Ethernet
Controller [8086:100e] (rev 02)
Subsystem: Intel Corporation PRO/1000 MT Desktop Adapter [8086:001e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64 (63750ns min)
Interrupt: pin A routed to IRQ 19
Region 0: Memory at f4200000 (32-bit, non-prefetchable) [size=128K]
Region 2: I/O ports at d010 [size=8]
Capabilities: [dc] Power Management version 2
Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
Capabilities: [e4] PCI-X non-bridge device
Command: DPERE- ERO+ RBC=512 OST=1
Status: Dev=ff:1f.0 64bit- 133MHz- SCD- USC- DC=simple
DMMRBC=2048 DMOST=1 DMCRS=8 RSCEM- 266MHz- 533MHz-
Kernel driver in use: e1000
Kernel modules: e1000
00:04.0 System peripheral [0880]: InnoTek Systemberatung GmbH VirtualBox Guest
Service [80ee:cafe]
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR- INTx-
Interrupt: pin A routed to IRQ 20
Region 0: I/O ports at d020 [size=32]
Region 1: Memory at f4400000 (32-bit, non-prefetchable) [size=4M]
Region 2: Memory at f4800000 (32-bit, prefetchable) [size=16K]
Kernel driver in use: vboxguest
Kernel modules: vboxguest
00:05.0 Multimedia audio controller [0401]: Intel Corporation 82801AA AC'97
Audio Controller [8086:2415] (rev 01)
Subsystem: Dell 82801AA AC'97 Audio Controller [1028:0177]
Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 21
Region 0: I/O ports at d100 [size=256]
Region 1: I/O ports at d200 [size=64]
Kernel driver in use: snd_intel8x0
Kernel modules: snd_intel8x0
00:07.0 Bridge [0680]: Intel Corporation 82371AB/EB/MB PIIX4 ACPI [8086:7113]
(rev 08)
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR- INTx-
Interrupt: pin A routed to IRQ 9
Kernel driver in use: piix4_smbus
Kernel modules: i2c_piix4
00:08.0 Ethernet controller [0200]: Intel Corporation 82540EM Gigabit Ethernet
Controller [8086:100e] (rev 02)
Subsystem: Intel Corporation PRO/1000 MT Desktop Adapter [8086:001e]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort-
<TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64 (63750ns min)
Interrupt: pin A routed to IRQ 16
Region 0: Memory at f4820000 (32-bit, non-prefetchable) [size=128K]
Region 2: I/O ports at d240 [size=8]
Capabilities: [dc] Power Management version 2
Flags: PMEClk- DSI+ D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
Capabilities: [e4] PCI-X non-bridge device
Command: DPERE- ERO+ RBC=512 OST=1
Status: Dev=ff:1f.0 64bit- 133MHz- SCD- USC- DC=simple
DMMRBC=2048 DMOST=1 DMCRS=8 RSCEM- 266MHz- 533MHz-
Kernel driver in use: e1000
Kernel modules: e1000
00:0c.0 USB controller [0c03]: Intel Corporation 7 Series/C210 Series Chipset
Family USB xHCI Host Controller [8086:1e31] (prog-if 30 [XHCI])
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR- INTx-
Latency: 64, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 20
Region 0: Memory at f4840000 (32-bit, non-prefetchable) [size=64K]
Kernel driver in use: xhci_hcd
Kernel modules: xhci_pci
00:0d.0 SATA controller [0106]: Intel Corporation 82801HM/HEM (ICH8M/ICH8M-E)
SATA Controller [AHCI mode] [8086:2829] (rev 02) (prog-if 01 [AHCI 1.0])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr-
Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort-
<MAbort- >SERR- <PERR- INTx-
Latency: 64
Interrupt: pin A routed to IRQ 21
Region 0: I/O ports at d248 [size=8]
Region 1: I/O ports at d250 [size=4]
Region 2: I/O ports at d258 [size=8]
Region 3: I/O ports at d260 [size=4]
Region 4: I/O ports at d270 [size=16]
Region 5: Memory at f4850000 (32-bit, non-prefetchable) [size=8K]
Capabilities: [70] Power Management version 3
Flags: PMEClk- DSI- D1- D2- AuxCurrent=0mA
PME(D0-,D1-,D2-,D3hot-,D3cold-)
Status: D0 NoSoftRst- PME-Enable- DSel=0 DScale=0 PME-
Capabilities: [a8] SATA HBA v1.0 BAR4 Offset=00000002
Kernel driver in use: ahci
Kernel modules: ahci
** USB devices:
Bus 002 Device 001: ID 1d6b:0003 Linux Foundation 3.0 root hub
Bus 001 Device 002: ID 80ee:0021 VirtualBox USB Tablet
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
- - -- System Information:
Debian Release: 10.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-5-amd64 (SMP w/2 CPU cores)
Kernel taint flags: TAINT_DIE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-4.19.0-5-amd64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.133
ii kmod 26-1
ii linux-base 4.6
Versions of packages linux-image-4.19.0-5-amd64 recommends:
ii apparmor 2.13.2-10
ii firmware-linux-free 3.4
Versions of packages linux-image-4.19.0-5-amd64 suggests:
pn debian-kernel-handbook <none>
ii grub-pc 2.02+dfsg1-20
pn linux-doc-4.19 <none>
Versions of packages linux-image-4.19.0-5-amd64 is related to:
pn firmware-amd-graphics <none>
pn firmware-atheros <none>
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-intel-sound <none>
pn firmware-intelwimax <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
pn firmware-linux-nonfree <none>
pn firmware-misc-nonfree <none>
pn firmware-myricom <none>
pn firmware-netxen <none>
pn firmware-qlogic <none>
pn firmware-realtek <none>
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>
- - -- no debconf information
- --
Elias Werberich <el...@werberich.de>
- ------------------------------------
GnuPG-Fingerprint: EB36 7730 B5E7 8968 AE7B 69D1 4FAC B12F 72B8 04B7
GnuPG-Key-ID: 0x4FACB12F72B804B7
-----BEGIN PGP SIGNATURE-----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=YaVC
-----END PGP SIGNATURE-----
