Arm CCA in KVM, drm/sched regression, low-level cleanups

Arm CCA support for KVM advanced through a large revision cycle while networking, VFIO, and x86 memory work continued. A drm/sched performance regression also drew maintainer attention shortly before a release.

Arm CCA support for KVM reaches v16

A 45-patch series at version 16 adds Arm Confidential Compute Architecture support to KVM, covering confidential VMs and the Realm Management Monitor. Hardware testing feedback and review continued across a large thread on linux-kernel. The work matters for arm64 hosts that need KVM-backed confidential computing.

fwnode PCS provider API for phylink

Version 14 of a 12-patch series introduces a fwnode PCS provider-consumer API plus dynamic PCS attach and detach handling inside phylink. The series remains under technical review. Drivers that bind PCS blocks through firmware nodes gain a clearer lifecycle model.

drm/sched FAIR policy regression on 9070XT

A regression report states that the drm/sched FAIR policy causes serious performance degradation at max GPU load on the 9070XT. Maintainers discussed a possible revert days before the 7.2 release. Scheduler and GPU users need a fix or rollback before that window closes.

Dynamic quote buffers for TDX guests

A four-patch v3 series makes TDX guest quote buffer size dynamic and prompted KVM and Intel discussion of attestation scoping, DICE, and migration uAPI. The thread stayed technical across several participants. Attestation and live-migration interfaces for TDX guests depend on how this buffer and related uAPI settle.

Start of X86_X32_ABI removal

A two-patch v3 series disables the X86_X32_ABI config option to begin removing the ABI. Follow-up mail covered LTS timing. Distributions and remaining X32 users need to track when the option disappears from stable trees.

CPA fixes for x86 page attributes

A five-patch v2 series fixes races, use-after-frees, and an RWX check bug in the x86 change-page-attribute path. Review treated the changes as security-relevant. Correct PAT and attribute updates remain basic to x86 memory safety.

Per-netns ARP and ND neighbour tables

Version 4 of a 15-patch net-next series converts global arp_tbl and nd_tbl into per-netns tables so neighbour sysctls can differ by namespace. Discussion continued on netdev. Multi-tenant and container networking benefit from isolated neighbour state.

VFIO passthrough for CXL Type-2 devices

A 27-patch v4 series adds VFIO PCI passthrough for CXL Type-2 devices so guests can drive virtual HDM decoders and resets. The set is still under review. CXL accelerator and memory-device virtualization relies on this path.