A ProVerif study and eight critical CVEs collide with the draft author's rebuttal that the flaws are implementation bugs, and the argument detours into who is answering with AI.
By staffGoogle engineer Ackerley Tng’s 88-patch RFC sketches how confidential guests could back private memory with tmpfs, custom providers, and device BARs.
By oopsA patch series generalizes PCI's untrusted flag into cross-bus DISABLED, ADVERSARY, and FULL modes that userspace can set before any driver binds.
By kexecFormal analysis yields three CVSS 9-plus flaws in award-touted confidential computing attested TLS stacks.
By ttlA trimmed v22 series adds VM-type abstractions and non-runnable Realm scaffolding so confidential guests can share common paths with pKVM.
By kexecArm posts the eighteenth revision of structural KVM changes for confidential Realm VMs, still short of a runnable guest.
By kexecGoogle posts a revised series to flip private and shared guest pages without reallocating them, plus broader KVM selftests.
By oopsArm CCA realms and TDX quote plumbing are no longer vendor demos; they are mainline ABI fights over roots of trust, hardware gaps, and how much attestation the hypervisor should own.
By kexecA guest-side fix for growing attestation blobs reopened whether Intel TDX quotes belong in KVM or the host driver.
By oopsAlexander Graf’s Device Memory Buffer feature would confine each virtio device to a shared region it owns, instead of ordinary guest RAM.
By renderSteven Price's 37-patch series brings realm guests to arm64 KVM, targeting RMM v2.0-bet2 under maintainer scrutiny.
By kexecSteven Price’s 45-patch series wires Linux KVM to the Realm Management Monitor so hosts can run protected Arm guests.
By kexec