46

After upgrading my Ubuntu 22.04 to Ubuntu 22.10, the following sequence of messages started to appear on the boot screen:

blacklist: Problem blacklisting hash (-13)
[...]
blacklist: Problem blacklisting hash (-13)

This is NOT a blocking error, the boot goes on without any apparent issue and I'm able to use my Ubuntu as usual. These messages were not present before the upgrade, where does it come from?

My setup:

  • OS: Ubuntu 22.10 x86_64
  • Kernel: 5.19.0-21-generic
  • System manufacturer: SAMSUNG ELECTRONICS CO., LTD.
  • System product-name: 450R4E/450R5E/450R4V/450R5V/4450RV
  • Bios release date: 04/29/2014
  • Bios version: P08RBG.216.140429.ZW
  • SecureBoot: Disabled
  • CPU: Intel i5-3230M (4) @ 3.2GHz
  • GPU 1: Intel 3rd Gen Core processor Graphics Controller
  • GPU 2: NVIDIA GeForce 610M/710M/810M/820M / GT 620M/625M/630M/720M
Lorenz Keel
  • 9,511

1 Answers1

19

You can safely ignore it.

"These kernel messages should be treated as warning, not error. You should not remove blacklisted hashes (i.e. do not clear secure boot keys), this is a security measure to protect against malicious signatures.
These kernel messages now show because we hardened this security mechanism, and it now reveals issues with some firmwares.
There is an ongoing kernel patch to update this error message: https://lore.kernel.org/lkml/3b997266-067c-975c-911a-da146fe9033a@digikod.net/"

as reported in source.

This is something that the different manufacturers need to correct in their BIOS/firmware.
The correct approach (of seeing the messages as a Warning instead of an Error) is confirmed in the patch discussion:

"We should not hide EACCES errors. This logs issues, which is correct for duplicate hashes, and can help firmware vendors to fix their database. I'd really like to see a different log message instead: change the duplicate entry error code from EACCES to EEXIST, and call pr_warn for this specific case."

You just need to wait for upgrades from your motherboard producer. (Asus, Dell, Lenovo, etc.)
Or contact their support to report the issue and request a fix.

David Arcos
  • 123
Kamafeather
  • 606
  • 6
  • 11