PalinuroSec

Framework 13 with AMD 7040 - prevent kernel panic on suspension wakeup on driver mt7921e

i own a framework 13 laptop with the AMD 7040 series cpu and the mediatek wireless card, which randomly panics when the system wakes up from suspension. The bug occurs on Parrot Security 7 with linux kernel 6.12, 6.18 and 6.19, but i believe Debian 13 could be affected as well. the following fix doesn't try to patch the driver, but rather to disable it before suspension and re-enable it on wake up.

sudo nano /lib/systemd/system-sleep/framework-wifi-toggle

#!/bin/bash

PalinuroSec

openpgp4fpr:B35050593C2F765640E6DDDB97CAA129F4C6B9A4

PalinuroSec

#
# Script fragment to make dhclient supply nameserver information to resolvconf
#

# Tips:
# * Be careful about changing the environment since this is sourced
# * This script fragment uses bash features
# * As of isc-dhcp-client 4.2 the "reason" (for running the script) can be one of the following.
#   (Listed on man page:) MEDIUM(0) PREINIT(0)  BOUND(M)  RENEW(M)  REBIND(M)  REBOOT(M)         EXPIRE(D)  FAIL(D) RELEASE(D)  STOP(D) NBI(-) TIMEOUT(M)
#   (Also used in master script:)                                                                                                                         ARPCHECK(0), ARPSEND(0)

PalinuroSec

EDITION=$1
ARCH=$2
VERSION=$3

for EDITION in core home security; do
    for ARCH in arm64 armhf; do
        debootstrap --arch=$ARCH --components=main,contrib,non-free --include=gnupg2,nano,base-files parrot $EDITION-$ARCH https://deb.parrot.sh/direct/parrot/

        mount --bind /dev $EDITION-$ARCH/dev
        mount --bind /proc $EDITION-$ARCH/proc

PalinuroSec

package main

import (
	"fmt"
	"io"
	"io/ioutil"
	"net/http"
	"net/url"
	"os"
	"strconv"

PalinuroSec

Keybase proof

I hereby claim:

• I am palinurosec on github.
• I am palinuro (https://keybase.io/palinuro) on keybase.
• I have a public key ASASyVQNn7V1eTsJsLMj-8s2QNFad0IHqJL2aBi3-NddEgo

To claim this, I am signing this object:

PalinuroSec

server {
        listen 80 default_server;
        listen [::]:80 default_server;
        listen 443 ssl default_server;
        listen [::]:443 ssl default_server;
        include snippets/snakeoil.conf;

        root /srv;

        # Add index.php to the list if you are using PHP