From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: Miguel Ojeda <ojeda@kernel.org>
Cc: "Sasha Levin" <sashal@kernel.org>,
stable@vger.kernel.org, "Boqun Feng" <boqun@kernel.org>,
"Gary Guo" <gary@garyguo.net>,
"Björn Roy Baron" <bjorn3_gh@protonmail.com>,
"Benno Lossin" <lossin@kernel.org>,
"Andreas Hindborg" <a.hindborg@kernel.org>,
"Alice Ryhl" <aliceryhl@google.com>,
"Trevor Gross" <tmgross@umich.edu>,
"Danilo Krummrich" <dakr@kernel.org>,
"Daniel Almeida" <daniel.almeida@collabora.com>,
"Tamir Duberstein" <tamird@kernel.org>,
"Alexandre Courbot" <acourbot@nvidia.com>,
"Onur Özkan" <work@onurozkan.dev>,
rust-for-linux@vger.kernel.org
Subject: Re: [PATCH] docs: stable-kernel-rules: mention Rust soundness issues
Date: Wed, 21 Oct 2026 08:44:11 +0200 [thread overview]
Message-ID: <2026102155-hence-semifinal-b827@gregkh> (raw)
In-Reply-To: <20261020163358.176088-1-ojeda@kernel.org>
On Tue, Oct 20, 2026 at 06:33:58PM +0200, Miguel Ojeda wrote:
> Back in 2023 I asked the stable kernel team whether we could consider
> Rust soundness issues for backporting, since we wanted to be able to
> protect (as much as possible) downstream users of stable kernels.
>
> Since then, we have been doing our best to backport patches for Rust
> soundness issues.
>
> After the Rust experiment ended, I documented it in the "Submit checklist
> addendum" in our "Subsystem Profile document" [1] (i.e. `P:` entry in
> `MAINTAINERS`):
>
> #### Soundness issues and backporting
>
> In general, fixes for Rust soundness issues should be marked for
> backport, unless there is a reason not to (such as situations where
> the backport may require a lot of effort but the risk of users
> hitting UB is low).
>
> For context, while the stable kernel rules mention "theoretical
> issues" should not be backported (which one could argue Rust soundness
> issues are if no existing users hit UB), we discussed the topic of
> Rust soundness issues with the stable team and decided that we would
> do our best to backport them.
>
> The goal is to help to prevent actual issues for downstream users,
> distributions and vendors that patch the kernel further or even
> add completely new code on top, since those modifications could
> hit UB. In other words, the idea is to maintain the "extra layer"
> of protection in stable kernels too, as much as reasonably possible.
>
> Thus make it clearer by briefly mentioning it as well in the stable
> kernel rules.
>
> Link: https://rust-for-linux.com/contributing#soundness-issues-and-backporting [1]
> Signed-off-by: Miguel Ojeda <ojeda@kernel.org>
> ---
> As requested, here is the following embedded patch as an independent
> thread:
>
> https://lore.kernel.org/all/20261016160030.118973-1-ojeda@kernel.org/
>
> I added a small paragraph above to make it clear it is what we have been
> doing in practice since then.
>
> Documentation/process/stable-kernel-rules.rst | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/Documentation/process/stable-kernel-rules.rst b/Documentation/process/stable-kernel-rules.rst
> index edf90bbe30f4..ffa7905543a6 100644
> --- a/Documentation/process/stable-kernel-rules.rst
> +++ b/Documentation/process/stable-kernel-rules.rst
> @@ -17,7 +17,7 @@ Rules on what kind of patches are accepted, and which ones are not, into the
>
> - It fixes a problem like an oops, a hang, data corruption, a real security
> issue, a hardware quirk, a build error (but not for things marked
> - CONFIG_BROKEN), or some "oh, that's not good" issue.
> + CONFIG_BROKEN), a Rust soundness issue, or some "oh, that's not good" issue.
> - Serious issues as reported by a user of a distribution kernel may also
> be considered if they fix a notable performance or interactivity issue.
> As these fixes are not as obvious and have a higher risk of a subtle
>
> base-commit: c03c1a14507dfaf8b856c2608f9ac216021fc222
> --
> 2.56.0
Looks good, thanks, I'll queue this up after my first batch of -rc1
patches get merged.
greg k-h
prev parent reply other threads:[~2026-10-21 6:52 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-10-20 16:33 [PATCH] docs: stable-kernel-rules: mention Rust soundness issues Miguel Ojeda
2026-10-21 6:44 ` Greg Kroah-Hartman [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2026102155-hence-semifinal-b827@gregkh \
--to=gregkh@linuxfoundation.org \
--cc=a.hindborg@kernel.org \
--cc=acourbot@nvidia.com \
--cc=aliceryhl@google.com \
--cc=bjorn3_gh@protonmail.com \
--cc=boqun@kernel.org \
--cc=dakr@kernel.org \
--cc=daniel.almeida@collabora.com \
--cc=gary@garyguo.net \
--cc=lossin@kernel.org \
--cc=ojeda@kernel.org \
--cc=rust-for-linux@vger.kernel.org \
--cc=sashal@kernel.org \
--cc=stable@vger.kernel.org \
--cc=tamird@kernel.org \
--cc=tmgross@umich.edu \
--cc=work@onurozkan.dev \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox