Kernel: Arm CCA, hot-page tiering, and virtio checks

Kernel traffic on 2026-08-10 was dominated by large virtualization and memory-management series, with a heated debate over hot-page promotion and a security-focused virtio validation set. Arm CCA, AMD vIOMMU, and guest_memfd work also advanced.

Arm CCA support for KVM reaches v16

A 45-patch series at version 16 adds Arm Confidential Compute Architecture support to KVM, including an RMI firmware layer and protected VM (Realm) handling. The work targets arm64 hosts that need hardware-backed isolation for confidential guests. Developers tracking confidential computing on Arm should follow the series as it matures the KVM side of the CCA stack.

Hot-page promotion infrastructure draws maintainer debate

Version 8 of an eight-patch mm series proposing hot-page tracking and promotion (pghot) for CXL tiering triggered heated discussion among maintainers. Participants weighed the new subsystem against DAMON and existing NUMA balancing. Readers working on tiered or heterogeneous memory need to watch the outcome, which could reshape core promotion paths.

AMD hardware-accelerated vIOMMU support posted

AMD submitted version 4 of a 24-patch series introducing hardware-accelerated virtualized IOMMU (vIOMMU) support. The patches cover guest command, event, and PPR logs plus IOMMUFD and nested mapping changes. Virtualization stacks that rely on AMD IOMMU features in nested setups have a concrete path to track.

fwnode PCS provider API lands at v12

A 12-patch net-next series at version 12 introduces a fwnode-based PCS provider and consumer API for phylink, with dynamic handling and an Airoha driver. The goal is to replace mac_select_pcs and export-symbol patterns. Network driver authors should note the shift toward firmware-node PCS configuration.

Virtio drivers add device-value validation

A four-patch set adds validation of device-reported values across virtio drivers and fixes a use-after-free affecting virtio-mem, input, and console. Discussion examined the guest trust model and LLM-assisted checking. The work hardens virtio guests against untrusted host-provided device data.

nova-core gains GPU interrupt and GSP event support

NVIDIA posted a 17-patch series for the nova-core Rust driver that adds a GIN interrupt tree, MSI/MSI-X handling, and GSP event dispatch. The changes replace polling with proper event delivery. Rust GPU driver work and NVIDIA upstreaming both advance with this interrupt infrastructure.

guest_memfd in-place conversion series at v10

Version 10 of a 41-patch guest_memfd series adds in-place conversion support along with selftests for pinning, hole-punch, multi-process, and pre-allocation cases. The work refines memory handling for protected or confidential guests. KVM and confidential-computing developers gain broader test coverage and conversion mechanics to review.