QEMU QXL hardening and virtualization proposals

QEMU developers pushed security validation for the QXL display device and several isolation and CPU modeling proposals, while PostgreSQL hackers examined a selectivity estimation change. The threads focused on guest-host boundary hardening and more accurate feature exposure for live migration and testing.

QEMU QXL stride and format validation

Patch revisions v4 and v5 for QEMU's QXL display device add validation of the primary surface stride against width and format. The checks block a malicious guest from triggering a host out-of-bounds read during display refresh. Hosts that expose QXL to untrusted guests gain a concrete defense against this class of memory access.

vhost-user isolated memory RFC

An RFC series of 15 patches proposes memory isolation for vhost-user through bounce buffers and shadow virtqueues. The design avoids giving the backend direct access to guest memory. Developers building or deploying secure vhost-user backends have a concrete approach under active discussion.

Named Arm64 CPU models for KVM

RFC v3 of a 19-patch series introduces named CPU models for Arm64 on KVM. The models are intended to make cross-host live migration feasible by standardizing feature sets. Review so far concentrates on build fixes and the rationale for the associated QMP command.

Extended s390x CPACF emulation

Version 14 of a 19-patch series extends QEMU's CPACF support for the s390x target. The work adds cross-platform emulation of the crypto instructions so that kernel modules can be tested without real hardware. s390x developers gain a practical way to exercise CPACF-dependent code paths in ordinary QEMU environments.

Separate max-v8 and max-v9 Arm CPU types

A seven-patch series introduces distinct max-v8 and max-v9 CPU types for the Arm target. The split correctly models Armv9 restrictions on features that are deprecated in v8. Guests and management tools can now select a CPU model that matches the intended architecture generation without inheriting inappropriate legacy features.

PostgreSQL var_eq_const MCV selectivity

A patch to PostgreSQL's var_eq_const proposes summing selectivity across all matching most-common-value entries instead of stopping at the first match when non-default collations are in use. Tom Lane observed that the added runtime cost outweighs the benefit in common cases. Planner accuracy for equality estimates under unusual collations is the practical stake for query authors and extension writers.

Guest-driven IGVM launch updates

Version 4 of an 11-patch series adds a fw-cfg interface that lets a guest drive IGVM launch updates for confidential computing VMs. The BYOF mechanism gives the guest a controlled way to supply launch-time data. Operators of CoCo environments obtain a clearer path for dynamic configuration during VM startup.