Deep Dive Into Linux Kernel Livepatch
summary
Explains how Linux livepatch replaces a buggy function at runtime by compiling a fixed function into a module and using ftrace nop->call redirection to reroute calls, with a clear consistency tradeoff: Kpatch stops and inspects stacks, KGraft migrates tasks one-by-one, Mainline uses exit‑migration hybrid. Describes kpatch-build’s workflow of building patched vs original binaries, producing a module with kpatch-build diffs + .klp.rela ELF sections to resolve local symbols, and demos a working patch that sums kernel allocations shown after insmod: demo: meminfo sum of kernel allocs inserted via insmod.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:02What is kernel Livepatch?
- 2:34Why do we need Livepatch?
- 4:37Code redirection with Ftrace
- 13:44Livepatch(Mainline Linux)
- 22:09Limitations of driver structure approach
- 23:21Need of ELF sections
- 36:05Livepatch limitations
related talks
29mDeep Dive Into Linux Kernel Livepatch
33mLinux Kernel Live Patching
39mLet's meet the kernel livepatch feature
39mThe Life of a Kernel Bugfix
09mLinux Kernel Bug Fixing Project
43mGetting to Know the Linux Kernel: A Beginner's Guide
28mBuild System Analysis for Kernel Development and Customization
53mAn engineer's guide to Linux Kernel upgrades