[FIPS 8.6 and 8.10 Compliant] CVE-2025-38380

[roxanan1996]

Commit: 3d30048 ("kernel: i2c/designware: Fix an initialization issue") was cherry-picked from linux-mainline. It applied cleanly.

BUILD

> grep -E -B 5 -A 5 '\[TIMER\]|^Starting Build' ~/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kernel-build-after.log
/home/rnicolescu/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kernel-src-tree-fix
Skipping make mrproper
[TIMER]{MRPROPER}: 0s
x86_64 architecture detected, copying config
'configs/kernel-x86_64.config' -> '.config'
Setting Local Version for build
CONFIG_LOCALVERSION="-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95"
Making olddefconfig
scripts/kconfig/conf  --olddefconfig Kconfig
#
# configuration written to .config
#
Starting Build
scripts/kconfig/conf  --syncconfig Kconfig
  DESCEND objtool
  DESCEND bpf/resolve_btfids
  CALL    scripts/checksyscalls.sh
  CHK     include/generated/compile.h
--
  LD [M]  sound/usb/usx2y/snd-usb-usx2y.ko
  LD [M]  sound/virtio/virtio_snd.ko
  LD [M]  sound/x86/snd-hdmi-lpe-audio.ko
  LD [M]  sound/xen/snd_xen_front.ko
  LD [M]  virt/lib/irqbypass.ko
[TIMER]{BUILD}: 280s
Making Modules
  INSTALL arch/x86/crypto/blowfish-x86_64.ko
  INSTALL arch/x86/crypto/camellia-aesni-avx-x86_64.ko
  INSTALL arch/x86/crypto/camellia-aesni-avx2.ko
  INSTALL arch/x86/crypto/camellia-x86_64.ko
--
  INSTALL sound/virtio/virtio_snd.ko
  INSTALL sound/x86/snd-hdmi-lpe-audio.ko
  INSTALL sound/xen/snd_xen_front.ko
  INSTALL virt/lib/irqbypass.ko
  DEPMOD  4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+
[TIMER]{MODULES}: 13s
Making Install
sh ./arch/x86/boot/install.sh 4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+ arch/x86/boot/bzImage \
	System.map "/boot"
[TIMER]{INSTALL}: 17s
Checking kABI
kABI check passed
Setting Default Kernel to /boot/vmlinuz-4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+ and Index to 0
The default is /boot/loader/entries/497a578a54024d84bfd7b11622883805-4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+.conf with index 0 and kernel /boot/vmlinuz-4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+
The default is /boot/loader/entries/497a578a54024d84bfd7b11622883805-4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+.conf with index 0 and kernel /boot/vmlinuz-4.18.0-rnicolescu_fips-8-compliant_4.18.0-553.16.1-e13bfbb95+
Generating grub configuration file ...
done
Hopefully Grub2.0 took everything ... rebooting after time metrices
[TIMER]{MRPROPER}: 0s
[TIMER]{BUILD}: 280s
[TIMER]{MODULES}: 13s
[TIMER]{INSTALL}: 17s
[TIMER]{TOTAL} 312s
Rebooting in 10 seconds

kernel-build-after.log
kernel-build-before.log

Kselftests

> ~/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kernel-tools/kselftest-diff.sh ~/ciq/vms/fips-8-compliant_4.18.0-553.16.1
/home/rnicolescu/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kselftest-before.log
234
/home/rnicolescu/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kselftest-after.log
234
Before: /home/rnicolescu/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kselftest-before.log
After: /home/rnicolescu/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kselftest-after.log
Diff:
No differences found.

kselftest-after.log
kselftest-before.log

Check_kernel_commits including interdiff

> check_kernel_commits.py --repo ~/ciq/vms/fips-8-compliant_4.18.0-553.16.1/kernel-src-tree-fix --pr_branch {rnicolescu}_fips-8-compliant_4.18.0-553.16.1 --base_branch fips-8-compliant/4.18.0-553.16.1
Comparing commits 3d30048958e0d43425f6d4e76565e6249fa71050 and e13bfbb95c7a0e02e0244fb773325472e75fcfb0...
interdiff result:
No diff between 3d30048958e0d43425f6d4e76565e6249fa71050 and e13bfbb95c7a0e02e0244fb773325472e75fcfb0
All referenced commits exist upstream and have no Fixes: tags.

[bmastbergen]

🥌