Arm CCA, pahole Rust, TLS offload

Kernel development activity concentrated on confidential computing, DWARF tooling for Rust, and hardware offload paths. Several long-running series reached new revisions while one submission drew process criticism.

Arm CCA support for KVM hits v16

A 45-patch series at version 16 adds Arm Confidential Compute Architecture Realm support to KVM, covering the RMI firmware layer and protected VM handling. Seven participants discussed the proposal on the main kernel list. The work matters for arm64 hosts that need to run confidential guests under KVM.

pahole extends Rust DWARF and dwz handling

Arnaldo Carvalho de Melo posted a 12-patch pahole series that adds DWARF support for Rust variant_parts and enums plus references to dwz alternate debug files. Rust-for-Linux maintainers joined the BTF mapping discussion. Accurate BTF generation from Rust kernel code depends on these extensions.

TLS 1.3 hardware offload reaches v16

A 10-patch net-next series adds TLS 1.3 hardware offload and KeyUpdate support to kernel TLS for mlx5, accompanied by selftests. The single-author submission continues the kTLS offload path. Operators with capable NICs gain a route to higher-throughput encrypted networking in the kernel.

ALLOC_UNMAPPED and direct-map controls

Version 3 of a 26-patch memory-management series introduces ALLOC_UNMAPPED and AS_NO_DIRECT_MAP for guest_memfd and ASI use cases. Six participants examined the direct-map management changes. The flags give confidential and isolated guest memory tighter control over host mappings.

RISC-V IOMMU gains MSI remapping and VFIO

A 19-patch v3 series enables MSI remapping on the RISC-V IOMMU, turns IOMMU_DMA on by default, and adds VFIO and KVM device assignment. Two participants iterated on the enablement work. Device passthrough on RISC-V platforms moves closer to production readiness.

dma-buf fd leak race fixed

A two-patch v3 change closes a dma-buf file-descriptor leak that can occur when copy_to_user fails after fd_install. The fix reserves the descriptor first and publishes it only on success through a new dma_buf_fd_install helper. Six reviewers treated the race as security-relevant.

Virtual swap space series continues

Version 3 of an 11-patch set introduces a virtual swap layer built on swap tables with zswap or physical backends. Four participants reviewed the design while syzbot reported a KASAN null-pointer dereference. The abstraction aims to decouple swap consumers from concrete backing stores.

Fork stack-tag patch dismissed as AI slop

A one-line patch to reset the pointer tag of a vmapped thread stack before vfree was rejected by reviewers as undisclosed AI-generated material. Discussion among three participants shifted from the technical change to process and fees. The episode underscores current list norms around AI-assisted submissions.