|
|
Message-ID: <2026072819-legume-create-ce31@gregkh> Date: Tue, 28 Jul 2026 09:47:16 +0200 From: Greg KH <greg@...ah.com> To: oss-security@...ts.openwall.com Subject: Re: Linux kernel: KVM: Merge branch 'kvm-chainsaw' into HEAD On Tue, Jul 28, 2026 at 02:57:25AM -0400, Reid Sutherland wrote: > On 2026-07-27 3:47 p.m., Sam James wrote: > > Reid Sutherland <reid@...rddimension.net> writes: > > > > > On 2026-07-27 12:25 p.m., Solar Designer wrote: > > > > On Mon, Jul 27, 2026 at 09:46:12AM -0400, Reid Sutherland wrote: > > > > > For your information. > > > > > > > > > > https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=a204badd8432f93b7e862e7dac6db0fe3d65f370 > > > > Thanks, but can you please explain why exactly you think this is > > > > noteworthy for oss-security? > > > > > > > > I see there's a recent Phoronix story: > > > > > > > > https://www.phoronix.com/news/KVM-Chainsaw-Linux-7.3 > > > > > > > > and the patch series had been tracked and archived by LWN. > > > > > > > > This is definitely noteworthy for KVM project development, but even > > > > seeing all those other resources, I do not see why bring this in here? > > > > > > Core changes to virtualization should receive examination. Changing > > > data structures around because they're too big.. it's concerning, > > > following that patch is tricky because of its size. Would feel better > > > about it if changes like this were passed through a reliable LLM, but > > > even that requires relevant experience. And naming it chainsaw, what > > > purpose does that serve? I have very little trust. > > Paolo has been a maintainer for a long time and in FOSS even longer than > > that. Big refactoring can introduce bugs but I've no reason to doubt him > > and I don't really see why this change is any different from any other > > refactoring. > > > The refactor doesn't seem necessary, the original data structure appears to > be fine, now we have surface risk for something that doesn't solve a bug or > implement a feature. > > I don't care what someone's street cred is, it's their result. If you have objections to patches that are submitted to the Linux kernel, please go review them on the respective mailing list and provide feedback there with specifics. Commenting on a random mailing list like this will not change anything. thanks, greg k-h
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.