New Kernel Live Patching Combines kGraft & Kpatch

The newest kernel live patching solution uses an ftrace-based mechanism and kernel interface for doing live patching of the kernel with kernel module functions. According to Seth Jennings who posted the patches, "it represents the greatest common functionality set between kpatch and kGraft." Seth Jennings is a Red Hat developer. This new kernel live patching can accept kernel patches built by both kGraft and Kpatch. This design came out of the live patching mini-conference at the Linux Plumbers' Conference last month.
This new approach is just over one thousand lines of code in the kernel. This new live kernel patching mechanism can be found via this patch series. Perhaps this path -- or kGraft or Kpatch -- will be figured out in time for the Linux 3.19 merge window.
Add A Comment