Package: linux-headers-6.1.0-37-amd64 Version: 6.1.140-1 Severity: serious Hello Debian team,
(*First, I wish to apologize for not using the report tool fully. I used it and took the contents of the report from there to complete it, but my SMTP server failed to send the report, so I sent it manually instead. Thank you for understanding. Now to the report.*) I've encountered a serious and reproducible issue with the Debian 12 (Bookworm) kernel headers package that affects the ability to build out-of-tree kernel modules — such as for netfilter hooks or network drivers — using linux-headers-6.1.0-37-amd64. ==================== 📌 Problem Summary ==================== The installed kernel headers appear to be incomplete. While the symbolic link /lib/modules/$(uname -r)/build correctly points to /usr/src/linux-headers-6.1.0-37-amd64, this directory relies on shared contents from /usr/src/linux-headers-6.1.0-37-common, which is missing critical build infrastructure. As a result, any attempt to build a kernel module using the standard external Makefile flow fails or silently produces a broken .ko file that cannot be inserted. ==================== 🧨 Symptoms ==================== - make fails with: /usr/src/linux-headers-6.1.0-37-common/scripts/Makefile.build:44: /usr/src/linux-headers-6.1.0-37-common/scripts/basic/Makefile: No such file or directory - If the build succeeds by falling back to linux-source-6.1, the resulting .ko file throws: insmod: ERROR: could not insert module netherhook.ko: Invalid module format ==================== 🧪 Attempted Fixes ==================== - Tried make olddefconfig / make prepare / make modules_prepare - Verified all header links and paths are correct - Compared with working Kali system (same kernel base, properly functioning headers) ==================== ✅ Workaround ==================== Only way to build modules is to manually extract linux-source-6.1, manually prepare it with kernel config from /boot/, and avoid the headers package altogether. This breaks DKMS, automated toolchains, and all standard workflows relying on headers. ==================== 🔥 Impact ==================== This breaks expected kernel module workflows and contradicts Debian's packaging design, where linux-headers-* should be sufficient to compile out-of-tree modules. ==================== 🛠️ Recommendation ==================== Please verify that linux-headers-6.1.0-37-amd64 and -common contain: - include/config/auto.conf - include/generated/autoconf.h - scripts/basic/Makefile - Proper linker script compatibility (module.lds, etc.) Thanks for your work maintaining Debian — fixing this will restore a vital dev pipeline. Respectfully, Markus Johnsson (NetherTools project) -- System Information: Debian Release: 12.11 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-37-amd64 (SMP w/20 CPU threads; PREEMPT) Kernel taint flags: TAINT_FORCED_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages linux-headers-6.1.0-37-amd64 depends on: ii linux-compiler-gcc-12-x86 6.1.140-1 ii linux-headers-6.1.0-37-common 6.1.140-1 ii linux-kbuild-6.1 6.1.140-1 linux-headers-6.1.0-37-amd64 recommends no packages. linux-headers-6.1.0-37-amd64 suggests no packages. -- no debconf information -- Med vänlig hälsning / Regards Markus Johnsson [image: Mailsuite] Sent with Mailsuite · Unsubscribe <https://mailsuite.com/en/privacy/opt-out/unsubscribe/985906faef70ab81f81ff7118354680df9c8ce4a/7ff7ed2f940556df3e9d972b7e8a056be4e5840a6cfacf8e0902805c3957dc80cc3c7ad454450030eb92295f3d97ebeda4269560379d798671b221f8e727f85a> 07/10/25, 11:20:35 AM

