]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
s390/boot/vmlinux.lds.S: Ensure bzImage ends with SecureBoot trailer
authorAlexander Egorenkov <egorenar@linux.ibm.com>
Wed, 21 Jan 2026 13:59:50 +0000 (14:59 +0100)
committerHeiko Carstens <hca@linux.ibm.com>
Thu, 22 Jan 2026 14:15:50 +0000 (15:15 +0100)
commitddc6cbef3ef10359b5640b4ee810a520edc73586
treedfce34e2b93c9127e71334f706c5ad9fb227eb38
parent3317785a8803db629efc759d811d0f589d3a0b2d
s390/boot/vmlinux.lds.S: Ensure bzImage ends with SecureBoot trailer

Since commit 3e86e4d74c04 ("kbuild: keep .modinfo section in
vmlinux.unstripped") the .modinfo section which has SHF_ALLOC ends up
in bzImage after the SecureBoot trailer. This breaks SecureBoot because
the bootloader can no longer find the SecureBoot trailer with kernel's
signature at the expected location in bzImage. To fix the bug,
move discarded sections before the ELF_DETAILS macro and discard
the .modinfo section which is not needed by the decompressor.

Fixes: 3e86e4d74c04 ("kbuild: keep .modinfo section in vmlinux.unstripped")
Cc: stable@vger.kernel.org
Suggested-by: Vasily Gorbik <gor@linux.ibm.com>
Reviewed-by: Vasily Gorbik <gor@linux.ibm.com>
Tested-by: Vasily Gorbik <gor@linux.ibm.com>
Signed-off-by: Alexander Egorenkov <egorenar@linux.ibm.com>
Signed-off-by: Heiko Carstens <hca@linux.ibm.com>
arch/s390/boot/vmlinux.lds.S