Integrated Firmware Update fails

Ask Fedora
, , ,
1

Screenshot from 2024-06-25 00-31-46
Screenshot from 2024-06-25 00-31-46778×236 14.4 KB

So I got an Integrated Firmware Update notice. Restart to update did nothing. So I ran sudo fwupdmgr update in terminal and it fails with invalid argument warning.

wombat@fedora:~$ sudo fwupdmgr update
[sudo] password for wombat: 
Devices with no available firmware updates: 
 • MZ9LQ512HBLU-00B
 • System Firmware
 • UEFI Device Firmware
 • 720p HD Camera
╔══════════════════════════════════════════════════════════════════════════════╗
║ Upgrade UEFI dbx from 220 to 371?                                            ║
╠══════════════════════════════════════════════════════════════════════════════╣
║ Insecure versions of the Microsoft Windows boot manager affected by Black    ║
║ Lotus were added to the list of forbidden signatures due to a discovered     ║
║ security problem.This updates the dbx to the latest release from Microsoft.  ║
║                                                                              ║
║ Before installing the update, fwupd will check for any affected executables  ║
║ in the ESP and will refuse to update if it finds any boot binaries signed    ║
║ with any of the forbidden signatures.Applying this update may also cause     ║
║ some Windows install media to not start correctly.                           ║
║                                                                              ║
╚══════════════════════════════════════════════════════════════════════════════╝
Perform operation? [Y|n]: Y
Writing…                 [                                       ]
failed to write data to efivarfs: Error writing to file descriptor: Invalid argument
wombat@fedora:~$

Ideas?

2

Added f40, firmware, fwupd, workstation

3

This is on baremetal, not in a VM, right?

Did you see

4

Yes, actual laptop:

Samsung Galaxy Book Pro 15.6"

  • First Generation (Manufactured April 2021)
  • 11th Gen Intel Core™ i5-1135G7 @ 2.40GHz
  • Intel Iris Xe Graphics @ 1.30 GHz [Integrated]
  • 8GB RAM
  • 500GB SSD
  • 1920x1080 Amoled Screen @ 60Hz

Thanks for the links. Not sure how related they are, but I’ve bookmarked them nonetheless. They seem to be ASUS and Lenovo specific and No space left on device whereas mine is Samsung and Invalid argument. I’ll dig further into those links this weekend, perhaps.

1 Like
5

I ran fwupdmgr get-devices in terminal and close to upload report to fwupd.org. Don’t know if it will help or not. But near the bottom of the output is says Update failure is a known issue, visit this URL for more information: https://github.com/fwupd/fwupd/wiki/LVFS-Triaged-Issue:-dbx-efivarfs-IO-error. It appears I may need to update BIOS. I’ll need to investigate how to do that. One of the things I’ve never done before.

wombat@fedora:~$ fwupdmgr get-devices
SAMSUNG ELECTRONICS CO., LTD. 950XDB/951XDB/950XDY
│
├─11th Gen Intel Core™ i5-1135G7 @ 2.40GHz:
│     Device ID:          4bde70ba4e39b28f9eab1628f9dd6e6244c03027
│     Current version:    0x000000b4
│     Vendor:             Intel
│     GUIDs:              2347ad97-b545-5bae-b6b3-b70a9553cbba ← CPUID\PRO_0&FAM_06&MOD_8C
│                         1df99df5-22f4-5505-98cc-22dcc53b132a ← CPUID\PRO_0&FAM_06&MOD_8C&STP_1
│     Device Flags:       • Internal device
│   
├─720p HD Camera:
│     Device ID:          65a54fb6ce182f0e75edf0e43047d547a0d61f0e
│     Current version:    0.11
│     Vendor:             Generic (USB:0x2B7E)
│     Serial Number:      0001
│     GUID:               0d9a4586-c0c3-54cf-bf0a-28f97c66805f ← USB\VID_2B7E&PID_0173
│     Device Flags:       • Updatable
│   
├─MZ9LQ512HBLU-00B:
│     Device ID:          71b677ca0f1bc2c5b804fa1d59e52064ce589293
│     Summary:            NVM Express solid state drive
│     Current version:    FXM7AK1Q
│     Vendor:             Samsung (NVME:0x144D)
│     Serial Number:      S6HVNE0R401475
│     GUIDs:              8b86707a-1412-5389-8f66-725224d28879 ← NVME\VEN_144D&DEV_A809
│                         71c19ff0-0bc0-5c85-aa6f-ba47fcc33eee ← NVME\VEN_144D&DEV_A809&SUBSYS_144DA801
│                         ae9684af-902e-5f15-9baf-7995570a1307 ← SAMSUNG MZ9LQ512HBLU-00B
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Signed Payload
│   
├─System Firmware:
│ │   Device ID:          7598f2e6c1f0a68867453e68b19a02c5f7c1c031
│ │   Summary:            UEFI System Resource Table device (updated via NVRAM)
│ │   Current version:    1368
│ │   Minimum Version:    1368
│ │   Vendor:             SAMSUNG ELECTRONICS CO., LTD. (DMI:American Megatrends International, LLC.)
│ │   Update State:       Success
│ │   GUID:               a6ec0eb3-7323-4bd0-92a9-1bde6640c044
│ │   Device Flags:       • Internal device
│ │                       • Updatable
│ │                       • System requires external power source
│ │                       • Needs a reboot after installation
│ │                       • Cryptographic hash verification is available
│ │                       • Device is usable for the duration of the update
│ │   Device Requests:    • Message
│ │ 
│ ├─BootGuard Configuration:
│ │     Device ID:        b0d4430dfa6bde9f0c22680df36dbc8c15c80753
│ │     Current version:  20
│ │     Vendor:           Intel Corporation (MEI:0x8086)
│ │     GUIDs:            dd17041c-09ea-4b17-a271-5b989867ec65
│ │                       f18c7464-aa01-5b3d-bd4f-6623597d0f70 ← MEI\VEN_8086&DEV_A0E0
│ │                       9587e0d0-fcec-5e68-902c-37a2090d1eb4 ← MEI\VEN_8086&DEV_A0E0&SUBSYS_144DC856
│ │     Device Flags:     • Internal device
│ │   
│ └─UEFI dbx:
│       Device ID:        362301da643102b9f38477387e2193e57abaa590
│       Summary:          UEFI revocation database
│       Current version:  220
│       Minimum Version:  220
│       Vendor:           UEFI:Linux Foundation
│       Install Duration: 1 second
│       Update State:     Failed
│       Update Error:     failed to write data to efivarfs: Error writing to file descriptor: Invalid argument
│       Last modified:    2024-06-25 05:52
│       GUIDs:            f8ba2887-9411-5c36-9cee-88995bb39731 ← UEFI\CRT_A1117F516A32CEFCBA3F2D1ACE10A87972FD6BBE8FE0D0B996E09E65D802A503&ARCH_X64
│                         7e8a4d70-b517-5d9c-b3ae-e034e9e82876 ← UEFI\CRT_44FD2062B73610CAFAA2B62E87A0E19F4E57080BB92A40BDEACB01F4BC97ACEE&ARCH_X64
│       Device Flags:     • Internal device
│                         • Updatable
│                         • Supported on remote server
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│                         • Only version upgrades are allowed
│                         • Signed Payload
│     
├─TPM:
│     Device ID:          c6a80ac3a22083423992a3cb15018989f37834d6
│     Summary:            TPM 2.0 Device
│     Current version:    600.7.0.0
│     Vendor:             Intel (TPM:INTC)
│     GUIDs:              34801700-3a50-5b05-820c-fe14580e4c2d ← TPM\VEN_INTC&DEV_0000
│                         00d06c7f-2244-5a35-aa98-5d60704b3f5d ← TPM\VEN_INTC&MOD_TGL
│                         03f304f4-223e-54f4-b2c1-c3cf3b5817c6 ← TPM\VEN_INTC&DEV_0000&VER_2.0
│                         9c3106c7-42ca-5099-9363-96ef5c22cbf7 ← TPM\VEN_INTC&MOD_TGL&VER_2.0
│     Device Flags:       • Internal device
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device can recover flash failures
│                         • Full disk encryption secrets may be invalidated when updating
│                         • Signed Payload
│   
├─TigerLake-LP GT2 [Iris Xe Graphics]:
│     Device ID:          5792b48846ce271fab11c4a545f7a3df0d36e00a
│     Current version:    01
│     Vendor:             Intel Corporation (PCI:0x8086)
│     GUIDs:              54ff3ed7-1ea3-5279-975f-93c13bf2aa53 ← PCI\VEN_8086&DEV_9A49
│                         67d39bfe-cc78-53c9-a6f5-05a9b8f7b1e7 ← PCI\VEN_8086&DEV_9A49&SUBSYS_144DC856
│     Device Flags:       • Internal device
│                         • Cryptographic hash verification is available
│   
├─UEFI Device Firmware:
│     Device ID:          5a9ef29f45d88870a6b959c6719d4ed2bcf41225
│     Summary:            UEFI System Resource Table device (updated via NVRAM)
│     Current version:    35062529
│     Vendor:             DMI:American Megatrends International, LLC.
│     Update State:       Success
│     GUID:               683e45a6-3dc1-475d-8fe3-3a107cf5612d
│     Device Flags:       • Internal device
│                         • Updatable
│                         • System requires external power source
│                         • Needs a reboot after installation
│                         • Device is usable for the duration of the update
│     Device Requests:    • Message
│   
────────────────────────────────────────────────
Devices that were not updated correctly:
 • UEFI dbx (220 → 371)
Uploading firmware reports helps hardware vendors to quickly identify failing and successful updates on real devices.
Review and upload report now? (Requires internet connection) [Y|n]: 
Target:                  https://fwupd.org/lvfs/firmware/report
Payload:                 {
                           "ReportVersion" : 2,
                           "MachineId" : "2cc310b9c9f52dd1f329e68ead73ade839ecc065e206208e54707dc2e885a3ca",
                           "Metadata" : {
                             "DistroId" : "fedora",
                             "DistroVersion" : "40",
                             "DistroVariant" : "workstation"
                           },
                           "Reports" : [
                             {
                               "Checksum" : "bc6a604b29918d67d5fef745ad4375ca3d43d05e",
                               "ReleaseId" : null,
                               "Protocol" : "org.uefi.dbx",
                               "UpdateState" : 3,
                               "UpdateError" : "failed to write data to efivarfs: Error writing to file descriptor: Invalid argument",
                               "InstallDuration" : 1,
                               "Guid" : [
                                 "f8ba2887-9411-5c36-9cee-88995bb39731"
                               ],
                               "Plugin" : "uefi_dbx",
                               "VersionOld" : "220",
                               "VersionNew" : "371",
                               "Flags" : 149534122443043,
                               "Created" : 1719241971,
                               "Modified" : 1719294739,
                               "Metadata" : {
                                 "HostEnclosureKind" : "a",
                                 "DistroVersion" : "40",
                                 "RuntimeVersion(org.kernel)" : "6.9.5-200.fc40.x86_64",
                                 "RuntimeVersion(org.freedesktop.fwupd)" : "1.9.21",
                                 "HostSku" : "SCAI-A5A5-A5A5-TGL3-PRFW",
                                 "RuntimeVersion(org.freedesktop.fwupd-efi)" : "1.6",
                                 "UEFIUXCapsule" : "Enabled",
                                 "CpuArchitecture" : "x86_64",
                                 "SecureBoot" : "Disabled",
                                 "BatteryLevel" : "81",
                                 "PassimDownloadSaving" : "0",
                                 "HostFamily" : "Galaxy Book Series",
                                 "HostBiosVersion" : "P13RFW.068.240125.SP",
                                 "HostVendor" : "SAMSUNG ELECTRONICS CO., LTD.",
                                 "FwupdSupported" : "True",
                                 "PowerState" : "battery-discharging",
                                 "DistroPrettyName" : "Fedora Linux 40 (Workstation Edition)",
                                 "RuntimeVersion(com.hughsie.libxmlb)" : "0.3.19",
                                 "RuntimeVersion(com.hughsie.libjcat)" : "0.2.1",
                                 "DistroName" : "Fedora Linux",
                                 "LidState" : "open",
                                 "DistroVariant" : "workstation",
                                 "KernelVersion" : "6.9.5-200.fc40.x86_64",
                                 "CompileVersion(org.freedesktop.gusb)" : "0.4.9",
                                 "RuntimeVersion(org.freedesktop.Passim)" : "0.1.7",
                                 "BootTime" : "1719044086",
                                 "KernelName" : "Linux",
                                 "HostProduct" : "950XDB/951XDB/950XDY",
                                 "BatteryThreshold" : "10",
                                 "HostFirmwareMajorRelease" : "ff",
                                 "CpuModel" : "Intel 11th Gen Intel Core™ i5-1135G7 @ 2.40GHz",
                                 "HostBaseboardManufacturer" : "SAMSUNG ELECTRONICS CO., LTD.",
                                 "HostFirmwareMinorRelease" : "ff",
                                 "HostBiosMajorRelease" : "05",
                                 "HostBiosVendor" : "American Megatrends International, LLC.",
                                 "EfivarNvramUsed" : "50978",
                                 "CompileVersion(com.hughsie.libjcat)" : "0.2.1",
                                 "DistroId" : "fedora",
                                 "HostBaseboardProduct" : "NP950XDB-KB2US",
                                 "CompileVersion(com.hughsie.libxmlb)" : "0.3.19",
                                 "CompileVersion(org.freedesktop.Passim)" : "0.1.7",
                                 "CompileVersion(org.freedesktop.fwupd)" : "1.9.21",
                                 "DisplayState" : "connected",
                                 "RuntimeVersion(org.freedesktop.gusb)" : "0.4.9",
                                 "HostBiosMinorRelease" : "13"
                               }
                             }
                           ]
                         }
Proceed with upload? [Y|n]: 
Update failure is a known issue, visit this URL for more information: https://github.com/fwupd/fwupd/wiki/LVFS-Triaged-Issue:-dbx-efivarfs-IO-error
Successfully uploaded 1 report
Do you want to upload reports automatically for future updates? [y|N]: n
wombat@fedora:~$
6

After searching, many threads and posts on the web seem to indicate that I need an original Windows Samsung install to update BIOS. Obviously that ain’t happening. I’ve disabled the firmware repo for the time being until I can hopefully find a way to get this sorted.

z
z1007×496 52.6 KB