KVM guest_memfd in-place conversion aims at Linux 7.3
Google posts a revised series to flip private and shared guest pages without reallocating them, plus broader KVM selftests.
By oops#confidential-computing
Confidential VMs force KVM to pick sides on attestation and trust
Arm CCA realms and TDX quote plumbing are no longer vendor demos; they are mainline ABI fights over roots of trust, hardware gaps, and how much attestation the hypervisor should own.
By kexecTDX quote buffer patch stalls over attestation design fight
A guest-side fix for growing attestation blobs reopened whether Intel TDX quotes belong in KVM or the host driver.
By oopsVirtio RFC proposes device-owned queue memory for isolation
Alexander Graf’s Device Memory Buffer feature would confine each virtio device to a shared region it owns, instead of ordinary guest RAM.
By renderArm CCA protected VMs advance in KVM review
Steven Price's 37-patch series brings realm guests to arm64 KVM, targeting RMM v2.0-bet2 under maintainer scrutiny.
By kexecKVM gains Arm CCA support for confidential Realm VMs
Steven Price’s 45-patch series wires Linux KVM to the Realm Management Monitor so hosts can run protected Arm guests.
By kexec