All allowed and unsigned Kernel Extensions fail to load

Question

.. I'm afraid that's true 😟, when I say all, I mean ALL of them.

At first opened another thread thinking the issue was present only for a bunch of kexts, but after days of randomly picking kexts and trying (some of them very popular), none worked and always displayed same error.

Including here a couple of additional examples (tried more, like kext to disable turbo boost, a wireless external card driver, hp printer driver, etc).

- osxfusefs (com.github.osxfuse.filesystems.osxfusefs)

- ACPIBackling (com.darwin.driver.ACPIBacklight)

Always same error. After aproving on system preferences and rebooting, running sudo kextutil -v /path/to/kext displays "...allowing to load" to inmediately show "... unable to calculate CDHash, disallowing load".

In the meantime, vmware keeps failing, also virtual box (both have unsigned extensions on that list), etc.

Here is the output of the couple of examples..., already reported through feedback assistant....

kext file:///Library/StagedExtensions/osxfusefs.kext/ is in hash exception list, allowing to load
Skipping migration.plist import (allowBundleIDs:41, cdhashArrayRef:41)
 { URL = "file:///Library/StagedExtensions/osxfusefs.kext/", 
ID = "com.github.osxfuse.filesystems.osxfusefs" } is missing or has an invalid CDHash. Disallowing load.
Kext rejected due to system policy:  
{ URL = "file:///Library/StagedExtensions/osxfusefs.kext/", 
ID = "com.github.osxfuse.filesystems.osxfusefs" }

And the other one

kext file:///Library/StagedExtensions/ACPIBacklight.kext/ is in hash exception list, allowing to load
Skipping migration.plist import (allowBundleIDs:41, cdhashArrayRef:41)
 { URL = "file:///Library/StagedExtensions/ACPIBacklight.kext/",
 ID = "com.darwin.driver.ACPIBacklight" } is missing or has an invalid CDash. Disallowing load.

Reported as FB6516891 and FB6498867 including kexts to try.

There are more than 9.000 kexts on that list..., can't believe on beta 3 this hasn't been fixed yet.., embarrasing. No need to say all of those extensions load without issues on Mojave and previous versions.

Guys! Let's keep reporting it so the hear us! 😟, no feedback yet

Beta
macOS

1.8k

Posted by

rubgape

Reply

Add a Comment

Answer 1

Still present on Catalina dev beta 4 😟 😟

Posted by

rubgape

Add a Comment

Answer 2

Now fails even a Serial Ata controller that worked perfectly fine with previous macOS releases.. It would be great if at least Apple or someone confirms if this is intended or not.

As far as I know and from WWDC sessions, the official word from Apple is that kexts will still load fine if user approved and the kext is signed or one of explicity allowed by Apple... with SIP enabled.., so this should be a bug.., or Apple forgot to mention this

sudo kextutil -v JMicronATA.kext Defaulting to kernel file '/System/Library/Kernels/kernel'
Cache file /System/Library/Caches/com.apple.kext.caches/Directories/Library/Extensions/KextIdentifiers.plist.gz
is out of date; not using.
Cache file /System/Library/Caches/com.apple.kext.caches/Directories/Library/Extensions/KextIdentifiers.plist.gz
is out of date; not using.
kext file:///Library/StagedExtensions/Library/Extensions/C363B637-698C-4992-B276-AA176445080E.kext/ i
s in hash exception list, allowing to load
Cache file /System/Library/Caches/com.apple.kext.caches/Directories/Library/Extensions/KextIdentifiers.plist.gz
is out of date; not using.
kext file:///Library/StagedExtensions/Library/Extensions/JMicronATA.kext/ is in hash exception list,
allowing to load Skipping migration.plist import (allowBundleIDs:43, cdhashArrayRef:43)
 
{ URL = "file:///Library/StagedExtensions/Library/Extensions/JMicronATA.kext/", ID = "com.jmicron.JMicronATA" }
is missing or has an invalid CDHash. Disallowing load. Kext rejected due to system policy:
{
URL = "file:///Library/StagedExtensions/Library/Extensions/JMicronATA.kext/", ID = "com.jmicron.JMicronATA" }
kext file:///Library/StagedExtensions/Library/Extensions/JMicronATA.kext/ is in hash exception list,
allowing to load  {
URL = "file:///Library/StagedExtensions/Library/Extensions/JMicronATA.kext/", ID = "com.jmicron.JMicronATA" }
is missing or has an invalid CDHash. Disallowing load. Kext rejected due to system policy: [0x7fff96506690]> { URL = "file:///Library/StagedExtensions/Library/Extensions/JMicronATA.kext/",
ID = "com.jmicron.JMicronATA" }
Code Signing Failure: not code signed Diagnostics for /Library/Extensions/JMicronATA.kext:

Posted by

rubgape

Add a Comment

All allowed and unsigned Kernel Extensions fail to load

Replies