37 ms·

It appears to be fixed in Linux 3.4 [1]. According to the original commit [2] it's been broken since 7dffa3c673fbcf835cd7be80bb4aec8ad3f51168 [3], which appeare

It appears to be fixed in Linux 3.4 [1]. According to the original commit [2] it's been broken since 7dffa3c673fbcf835cd7be80bb4aec8ad3f51168 [3], which appeared in 2.6.26. So, kernels between 2.6.26 and 3.3 (inclusive) are vulnerable. [1] https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bcd550745fc54f789c14e7526e0633222c505faa https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.... [2] https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6b43ae8a619d17c4935c3320d2ef9e92bdeed05d https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.... [3] https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=7dffa3c673fbcf835cd7be80bb4aec8ad3f51168 https://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2....

moe 14y ago
Which, in summary, is pretty much every production kernel out there. Spent the last two hours recovering servers, tomorrow will be another interesting day. Whoever figured it'd be a good idea to INSERT[1] the leap-second instead of just slowing/accelerating time... <censored> [1] Clock: inserting leap second 23:59:60 UTC
- sharth 14y ago
  Well, except for RHEL 5. That runs 2.6.18.
- Ecio78 14y ago
  I'm still tryin to understand why all my servers seem to be ok even if they have kernel that should be affected and some of them are running mysql... For example one of them is a debian kernel 2.6.32 running mysql and ntpd, and i see in dmesg Clock: inserting leap second 23:59:60 UTC but the cpu load is ok...
- __alexs 14y ago
  > Whoever figured it'd be a good idea to INSERT[1] the leap-second instead of just slowing/accelerating time... <censored> That would be the IERS organisation. There's going to be a vote in 2015 to abolish them entirely.
- rplnt 14y ago
  Well, it was a known bug and you had six months to prepare (i.e. update your kernel).
  - moe 14y ago
    Where was it published? Almost all of my machines run the Debian stable kernel and were still affected.
    - rplnt 14y ago
      The leap second was scheduled in January. That event is so unusual you might get worried. So you do a simple google search and find out that there was a critical bug[1] in Linux kernel last time leap second was inserted. People got worried rightfully[2][3]. I don't know about debian, if it was known prior, if it is the same bug as before, ... But I don't run Debian, you do. 1. https://bugzilla.redhat.com/show_bug.cgi?id=479765 https://bugzilla.redhat.com/show_bug.cgi?id=479765 2. http://it.slashdot.org/story/12/06/30/2123248/the-leap-second-is-here-are-your-systems-ready http://it.slashdot.org/story/12/06/30/2123248/the-leap-secon... 3. http://serverfault.com/questions/402087/does-centos-5-4-properly-handle-leap-seconds http://serverfault.com/questions/402087/does-centos-5-4-prop...
      - moe 14y ago
        No need to be a smart-ass about it. Even if I had googled (which I didn't) then I'd probably have assumed the fixes for bugs from 2009 to have long made it into the current distro kernels. I just didn't expect something so basic to be still (or again) broken.
        rplnt 14y ago
        Don't get me wrong, I wouldn't too by default. But do you remember Azure crashing on February 29th? And checking for that date is a matter of three conditions. Leap second is much more complex. I'm not trying to be a smart-ass.. I'm just saying it's something I would worry about and would try to find something about it. And perhaps it wouldn't lead anywhere with Debian. And still, something in your app stack could crash on this as well, leaving the kernel patching pointless.
doki_pen 14y ago
http://bit.ly/N1kZvS http://bit.ly/N1kZvS https://twitter.com/redditstatus/status/219244389044731904 https://twitter.com/redditstatus/status/219244389044731904
deleted 14y ago
[deleted]
glawatscheck 14y ago
I have 2.6.27 kernels here (SuSE 11.1) which seem unaffected so breakage might be a little later

moe 14y ago

Which, in summary, is pretty much every production kernel out there. Spent the last two hours recovering servers, tomorrow will be another interesting day. Whoever figured it'd be a good idea to INSERT[1] the leap-second instead of just slowing/accelerating time... <censored> [1] Clock: inserting leap second 23:59:60 UTC

sharth 14y ago
Well, except for RHEL 5. That runs 2.6.18.
Ecio78 14y ago
I'm still tryin to understand why all my servers seem to be ok even if they have kernel that should be affected and some of them are running mysql... For example one of them is a debian kernel 2.6.32 running mysql and ntpd, and i see in dmesg Clock: inserting leap second 23:59:60 UTC but the cpu load is ok...
__alexs 14y ago
> Whoever figured it'd be a good idea to INSERT[1] the leap-second instead of just slowing/accelerating time... <censored> That would be the IERS organisation. There's going to be a vote in 2015 to abolish them entirely.
rplnt 14y ago
Well, it was a known bug and you had six months to prepare (i.e. update your kernel).
- moe 14y ago
  Where was it published? Almost all of my machines run the Debian stable kernel and were still affected.
  - rplnt 14y ago
    The leap second was scheduled in January. That event is so unusual you might get worried. So you do a simple google search and find out that there was a critical bug[1] in Linux kernel last time leap second was inserted. People got worried rightfully[2][3]. I don't know about debian, if it was known prior, if it is the same bug as before, ... But I don't run Debian, you do. 1. https://bugzilla.redhat.com/show_bug.cgi?id=479765 https://bugzilla.redhat.com/show_bug.cgi?id=479765 2. http://it.slashdot.org/story/12/06/30/2123248/the-leap-second-is-here-are-your-systems-ready http://it.slashdot.org/story/12/06/30/2123248/the-leap-secon... 3. http://serverfault.com/questions/402087/does-centos-5-4-properly-handle-leap-seconds http://serverfault.com/questions/402087/does-centos-5-4-prop...
    - moe 14y ago
      No need to be a smart-ass about it. Even if I had googled (which I didn't) then I'd probably have assumed the fixes for bugs from 2009 to have long made it into the current distro kernels. I just didn't expect something so basic to be still (or again) broken.
      - rplnt 14y ago
        Don't get me wrong, I wouldn't too by default. But do you remember Azure crashing on February 29th? And checking for that date is a matter of three conditions. Leap second is much more complex. I'm not trying to be a smart-ass.. I'm just saying it's something I would worry about and would try to find something about it. And perhaps it wouldn't lead anywhere with Debian. And still, something in your app stack could crash on this as well, leaving the kernel patching pointless.

doki_pen 14y ago

http://bit.ly/N1kZvS http://bit.ly/N1kZvS https://twitter.com/redditstatus/status/219244389044731904 https://twitter.com/redditstatus/status/219244389044731904

deleted 14y ago

[deleted]

glawatscheck 14y ago

I have 2.6.27 kernels here (SuSE 11.1) which seem unaffected so breakage might be a little later