oss-sec mailing list archives

Re: Linux kernel: KVM: Merge branch 'kvm-chainsaw' into HEAD


From: Greg KH <greg () kroah com>
Date: Tue, 28 Jul 2026 09:47:16 +0200

On Tue, Jul 28, 2026 at 02:57:25AM -0400, Reid Sutherland wrote:
On 2026-07-27 3:47 p.m., Sam James wrote:
Reid Sutherland <reid () thirddimension net> writes:

On 2026-07-27 12:25 p.m., Solar Designer wrote:
On Mon, Jul 27, 2026 at 09:46:12AM -0400, Reid Sutherland wrote:
For your information.

https://git.kernel.org/pub/scm/virt/kvm/kvm.git/commit/?id=a204badd8432f93b7e862e7dac6db0fe3d65f370
Thanks, but can you please explain why exactly you think this is
noteworthy for oss-security?

I see there's a recent Phoronix story:

https://www.phoronix.com/news/KVM-Chainsaw-Linux-7.3

and the patch series had been tracked and archived by LWN.

This is definitely noteworthy for KVM project development, but even
seeing all those other resources, I do not see why bring this in here?

Core changes to virtualization should receive examination. Changing
data structures around because they're too big.. it's concerning,
following that patch is tricky because of its size. Would feel better
about it if changes like this were passed through a reliable LLM, but
even that requires relevant experience.  And naming it chainsaw, what
purpose does that serve?  I have very little trust.
Paolo has been a maintainer for a long time and in FOSS even longer than
that. Big refactoring can introduce bugs but I've no reason to doubt him
and I don't really see why this change is any different from any other
refactoring.


The refactor doesn't seem necessary, the original data structure appears to
be fine, now we have surface risk for something that doesn't solve a bug or
implement a feature.

I don't care what someone's street cred is, it's their result.

If you have objections to patches that are submitted to the Linux
kernel, please go review them on the respective mailing list and provide
feedback there with specifics.

Commenting on a random mailing list like this will not change anything.

thanks,

greg k-h


Current thread: