Linux Kernel Live Patching

on YouTube ↗33m

" summary

Describes a practical live kernel-patching pipeline that replaces whole functions at runtime so reboots are unnecessary, using ftrace for dynamic trampolines, stop_machine to serialize CPU state and a kpatch-style builder that emits patch modules; it walks every thread stack to ensure no patched function is active, supports shadow-variables for structure changes, and demonstrates fixing a cgroup/container exhaustion bug so systems overcome a ~65,000-container failure without reboot.

AI-written summary · about

" chapters (9)

1. 0:00Linux kernel live patching
2. 1:27Live bug fixing necessity
3. 5:26Tracing kernel functions with Ftrace
4. 10:38Dynamic backtrace and online patching
5. 13:54Security checks before patching
6. 17:07Generating live patch modules
7. 21:03Live patching in containers
8. 26:51Limitations and unsupported cases
9. 28:58Q&A

" related talks

• 38mDeep Dive Into Linux Kernel LivepatchAakarsh Jain · LinuxCon Europe 2022
• 29mDeep Dive Into Linux Kernel LivepatchAakarsh Jain · Open Source Summit Latin America 2022
• 39mLet's meet the kernel livepatch featureMarek Maślanka · Ubuntu Summit 2022
• 39mThe Life of a Kernel BugfixThadeu Lima de Souza Cascardo · Open Source Summit North America 2025
• 09mLinux Kernel Bug Fixing ProjectPiyush Mishra · LFX Mentorship Showcase 2023
• 53mAn engineer's guide to Linux Kernel upgradesIgnat Korchagin · foss-north 2025
• 46mStatus of Embedded LinuxTim Bird, Marta Rybczynska · Open Source Summit Europe 2025
• 52mLinux Kernel Debugging: Going Beyond Printk MessagesSergio Prado · Open Source Summit Europe + Embedded Linux Conference Europe 2019