This bug was fixed in the package linux - 6.17.0-4.4
---------------
linux (6.17.0-4.4) questing; urgency=medium
* questing/linux: 6.17.0-4.4 -proposed tracker (LP: #2122321)
* [SRU] Do not instantiate SPD5118 sensors on i801 SMBus controllers
(LP: #2114963)
- SAUCE: i2c: i801: Do not instantiate spd5118 under SPD Write Disable
* initramfs-tools: autopkgtest fails on arm64 with Possible missing firmware
/lib/firmware/apple/dfrmtfw-*.bin for built-in driver apple_z2
(LP: #2115758)
- [Config] Set TOUCHSCREEN_APPLE_Z2=m (arm64)
* Support TDX host in questing (LP: #2121873)
- SAUCE: x86/kexec: Consolidate relocate_kernel() function parameters
- SAUCE: x86/sme: Use percpu boolean to control WBINVD during kexec
- SAUCE: x86/virt/tdx: Mark memory cache state incoherent when making
SEAMCALL
- SAUCE: x86/kexec: Disable kexec/kdump on platforms with TDX partial
write erratum
- SAUCE: x86/virt/tdx: Remove the !KEXEC_CORE dependency
- SAUCE: x86/virt/tdx: Update the kexec section in the TDX documentation
- SAUCE: KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs
- [Config] enable TDX host support
* minimal kernel lacks modules for blk disk in arm64 openstack environments
where config_drive is required (LP: #2118499)
- [Config] Enable SYM53C8XX_2 on arm64
* Miscellaneous Ubuntu changes
- [Config] Re-enable Rust support, and make sure it doesn't get disabled
by accident
- [Config] updateconfigs for v6.17-rc5 rebase
-- Timo Aaltonen <[email protected]> Mon, 08 Sep 2025
17:10:38 +0300
** Changed in: linux (Ubuntu Questing)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/2121873
Title:
Support TDX host in questing
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Questing:
Fix Released
Bug description:
Since 6.16, TDX host is supported in the kernel but is incompatible with
kexec.
A cache flush is required in case TDX has been enabled before doing a kexec
to avoid silent memory corruption in the new kernel.
An upstream submission [0] fix this. The upstream submission is now a v8 and
is likely to be merged soon.
4 conditions are required at runtime to enable TDX Host:
- Hibernation disabled.
- TDX enabled in the bios.
- kvm_intel.tdx=1 set in the bootcommand line.
- Hardware support.
Two limitation are coming with this submission:
- In specific platforms (SPR/EMR), enabling TDX (all conditions fulfilled)
will disable kexec due to hardware limitations.
- After kexec, TDX can't be used. This error will manifest by having a dmesg
entry similar to:
virt/tdx: SEAMCALL (0x0000000000000021) failed: 0xc000050000000000
This has been applied on top of questing Ubuntu-6.17.0-3.3 and tested
on supported hardware by enabling TDX and using kexec into a new
kernel.
[0] :
https://lore.kernel.org/all/[email protected]/
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2121873/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
