The mseal() syscall was merged for #Linux 6.10: https://git.kernel.org/torvalds/c/0b32d436c015d5a88b3368405e3d8fe82f195a54

It's a way to prevent changes to portions of the virtual address space – and quite similar to #OpenBSD's mimmutable() syscall.

For details see the docs (https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/Documentation/userspace-api/mseal.rst) or two @LWN articles (https://lwn.net/Articles/948129/ and https://lwn.net/Articles/958438/)

#LinuxKernel #kernel

#QEMU 9.0.0 is out:

https://www.qemu.org/2024/04/23/qemu-9-0-0/

https://wiki.qemu.org/ChangeLog/9.0

"'block: virtio-blk now supports multiqueue where different queues of a single disk can be processed by different I/O threads

migration: support for “mapped-ram” capability allowing for more efficient VM snapshots, improved support for zero-page detection, and checkpoint-restart support for VFIO

ARM: architectural feature support for ECV, NV, and NV2

ARM: board support for […] raspi4b (Raspberry Pi 4 Model B)"'

The #ext4 data corruption issue[1] in #Linux #kernel v6.1.64 and v6.1.65 that was fixed with #LinuxKernel 6.1.66[2] apparently hit #Debian 12.3 bookworm point release[3]. Fixes are in the works, but preparing them will take a bit[4].

[1] https://lore.kernel.org/stable/20231205122122.dfhhoaswsfscuhc3@quack3/

[2] https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=linux-6.1.y&id=ea574927fc0bc343016ea3337fcfc0b3fb26fe08

[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057843

[4] https://fulda.social/@Ganneff/111551628003050712

In case you wondered why Linus recently fiddled with the user mode stack expansion code in mainline[1], here is your explanation:

CVE-2023-3269. #LinuxKernel privilege escalation vulnerability – https://www.openwall.com/lists/oss-security/2023/07/05/1

"#StackRot is a #Linux #kernel vulnerability found in the memory management subsystem [of 6.1 - 6.4], it affects almost all configurations and requires minimal capabilities to trigger"

[1] https://git.kernel.org/torvalds/c/9471f1f2f50282b9e8f59198ec6bb738b4ccc009 , which was followed by several fix-up patches in the past week