Public bug reported:

Several of our nginx servers started segfaulting after installing
security update version 1.24.0-2ubuntu7.10. See dmesg logs below. They
are null pointer dereferences (with a small offset, various ones
actually).

We pinned it back to the old one and the crashing stopped:


# apt-cache policy nginx
nginx:
  Installed: 1.24.0-2ubuntu7
  Candidate: 1.24.0-2ubuntu7
  Version table:
     1.24.0-2ubuntu7.10 500
        500 http://archive.ubuntu.com/ubuntu noble-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu noble-security/main amd64 Packages
 *** 1.24.0-2ubuntu7 9001
        500 http://archive.ubuntu.com/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status


Segfault in Nginx binary:


[di jun  9 10:31:13 2026] nginx[1735159]: segfault at 14 ip 000060506b3f8623 sp 
00007ffd4e2e9b98 error 4 in nginx[60506b3f3000+d3000] likely on CPU 1 (core 1, 
socket 0)
[di jun  9 10:31:13 2026] Code: c0 75 e1 31 c0 c3 90 48 39 c1 74 d8 48 29 c8 c3 
0f 1f 80 00 00 00 00 f3 0f 1e fa 48 85 d2 74 7f 55 49 89 fa 31 c9 48 89 e5 53 
<41> 0f b6 04 0a 0f b6 3c 0e 4c 8d 58 bf 49 89 c1 48 8d 5f bf 49 89
[di jun  9 10:31:14 2026] nginx[1735191]: segfault at e ip 000060506b3f8623 sp 
00007ffd4e2e9a98 error 4 in nginx[60506b3f3000+d3000] likely on CPU 2 (core 2, 
socket 0)
[di jun  9 10:31:14 2026] Code: c0 75 e1 31 c0 c3 90 48 39 c1 74 d8 48 29 c8 c3 
0f 1f 80 00 00 00 00 f3 0f 1e fa 48 85 d2 74 7f 55 49 89 fa 31 c9 48 89 e5 53 
<41> 0f b6 04 0a 0f b6 3c 0e 4c 8d 58 bf 49 89 c1 48 8d 5f bf 49 89
[di jun  9 10:31:14 2026] nginx[1735163]: segfault at b ip 000060506b3f8623 sp 
00007ffd4e2e9b98 error 4 in nginx[60506b3f3000+d3000] likely on CPU 5 (core 5, 
socket 0)
[di jun  9 10:31:14 2026] Code: c0 75 e1 31 c0 c3 90 48 39 c1 74 d8 48 29 c8 c3 
0f 1f 80 00 00 00 00 f3 0f 1e fa 48 85 d2 74 7f 55 49 89 fa 31 c9 48 89 e5 53 
<41> 0f b6 04 0a 0f b6 3c 0e 4c 8d 58 bf 49 89 c1 48 8d 5f bf 49 89


And in ngx_http_lua_module.so (which was not updated):


[di jun  9 10:02:53 2026] nginx[773967]: segfault at b8 ip 000070c3de569259 sp 
00007ffd5a968b80 error 6 in ngx_http_lua_module.so[16259,70c3de563000+45000] 
likely on CPU 0 (core 0, socket 0)
[di jun  9 10:02:53 2026] Code: 7c 24 58 48 89 de e8 d6 bf ff ff 48 85 c0 74 51 
48 89 da 4c 89 ee 48 89 c7 81 e3 ff ff ff 0f e8 1d be ff ff 81 cb 00 00 00 10 
<49> 89 46 08 41 8b 06 25 00 00 00 80 09 c3 41 89 1e e9 54 ff ff ff
[di jun  9 10:02:53 2026] nginx[773950]: segfault at b8 ip 000070c3de569259 sp 
00007ffd5a968b80 error 6 in ngx_http_lua_module.so[16259,70c3de563000+45000] 
likely on CPU 0 (core 0, socket 0)
[di jun  9 10:02:53 2026] Code: 7c 24 58 48 89 de e8 d6 bf ff ff 48 85 c0 74 51 
48 89 da 4c 89 ee 48 89 c7 81 e3 ff ff ff 0f e8 1d be ff ff 81 cb 00 00 00 10 
<49> 89 46 08 41 8b 06 25 00 00 00 80 09 c3 41 89 1e e9 54 ff ff ff
[di jun  9 10:02:53 2026] nginx[773959]: segfault at b8 ip 000070c3de569259 sp 
00007ffd5a968b80 error 6 in ngx_http_lua_module.so[16259,70c3de563000+45000] 
likely on CPU 2 (core 2, socket 0)
[di jun  9 10:02:53 2026] Code: 7c 24 58 48 89 de e8 d6 bf ff ff 48 85 c0 74 51 
48 89 da 4c 89 ee 48 89 c7 81 e3 ff ff ff 0f e8 1d be ff ff 81 cb 00 00 00 10 
<49> 89 46 08 41 8b 06 25 00 00 00 80 09 c3 41 89 1e e9 54 ff ff ff
[di jun  9 10:02:53 2026] nginx[773960]: segfault at b8 ip 000070c3de569259 sp 
00007ffd5a968b80 error 6 in ngx_http_lua_module.so[16259,70c3de563000+45000] 
likely on CPU 3 (core 3, socket 0)
[di jun  9 10:02:53 2026] Code: 7c 24 58 48 89 de e8 d6 bf ff ff 48 85 c0 74 51 
48 89 da 4c 89 ee 48 89 c7 81 e3 ff ff ff 0f e8 1d be ff ff 81 cb 00 00 00 10 
<49> 89 46 08 41 8b 06 25 00 00 00 80 09 c3 41 89 1e e9 54 ff ff ff


Linux lb-b4 6.14.0-1016-aws #16~24.04.1-Ubuntu SMP Tue Oct 14 02:15:09 UTC 2025 
x86_64 x86_64 x86_64 GNU/Linux

Linux myhost 6.8.0-39-generic #39-Ubuntu SMP PREEMPT_DYNAMIC Fri Jul  5
21:49:14 UTC 2024 x86_64 x86_64 x86_64 GNU/Linux

# cat /etc/lsb-release 
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=24.04
DISTRIB_CODENAME=noble
DISTRIB_DESCRIPTION="Ubuntu 24.04.4 LTS"

** Affects: nginx (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2156048

Title:
  nginx segfault because of update 1.24.0-2ubuntu7.10

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/2156048/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to