Skip to content

OvmfPkg: Rerun dispatcher after initializing virtio-rng

Oliver Steffen requested to merge osteffen/edk2:RHEL-58631-dispatcher-c9s into c9s

Merge Request Required Information

JIRA: https://issues.redhat.com/browse/RHEL-58631

Summary of Changes

This fix has been proposed upstream, but is not merged yet: https://github.com/tianocore/edk2/pull/6403

Since the pixiefail CVE fix the network stack requires a hardware random number generator. This can currently be a modern CPU supporting the RDRAND instruction or a virtio-rng device. The latter is initialized during the BDS phase. To ensure all depending (network) modules are also started, we need to run the dispatcher once more after the device was initialized. Without this, network boot is not available under certain hardware configurations. Fixes: 4c4ceb2c ("NetworkPkg: SECURITY PATCH CVE-2023-45237")

Approved Development Ticket(s)

All submissions to CentOS Stream must reference a ticket in Red Hat Jira.

Click for formatting instructions Please follow the CentOS Stream contribution documentation for how to file this ticket and have it approved.

List tickets each on their own line of this description using the format "Resolves: RHEL-1234", "Related: RHEL-2345" or "Reverts: RHEL-3456", as appropriate.

Merge request reports

Loading