burtness
Joined 8 years ago
Karma
75
Submissions
36
Member since
Mar 15
Joined 8 years ago
In this case Debian's current process is good - it's kernels track kernel.org stable releases. This debian bug is responsibly flagging "for visibility" that a serious bug has been discussed and fixed upstream.
[1] https://lore.kernel.org/stable/20231205122122.dfhhoaswsfscuh...
Hypervisor-Enforced Kernel Integrity (Heki):
Heki is a proof-of-concept that implements new KVM features (extended page tracking, MBEC support, CR pinning) and defines a new API to protect guest VMs. It is designed to be merged with the mainline project. It is inspired from other private implementations currently in use (e.g. Windows's Virtual Secure Mode), but our approach is tailored to Linux specificities.