Livepatching With Linux 5.1 To Support Atomic Replace & Cumulative Patches
Written by Michael Larabel in Security on 20 January 2019 at 01:28 AM EST. 14 Comments
SECURITY --
With the Linux 5.1 kernel cycle that should get underway in just over one month's time, there will now be the long in development work (it's been through 15+ rounds of public code review!) for supporting atomic replace and cumulative patches.

The atomic replace support to the kernel's common livepatch infrastructure allows for replacing/reverting an existing kernel live patch and for handling of multiple patches in a series as "cumulative patches." This code also improves the behavior around the patching order/stacking and allows recovering from the overhead of functions no longer being patched. The documentation describes the inner-workings of atomic replace in much more detail.

Following this work by Akamai, SUSE, and other developers, the atomic replace / cumulative patches series was merged to livepatching for-next this week making it staged material for the upcoming Linux 5.1 cycle. Depending upon how quickly the Linux 5.0 cycle settles down and is cleared for release, the Linux 5.1 merge window should formally open up around the start of March while the 5.1 stable release would likely debut around early May.

About The Author
Author picture

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 10,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter or contacted via MichaelLarabel.com.

Related Security News
Popular News This Week