The integration of Rust into the Linux kernel is a significant step towards enhancing memory safety, a critical aspect of kernel development.
Memory safety errors have historically accounted for a substantial portion of kernel vulnerabilities, but the use of Rust, a language designed with memory safety in mind, promises to reduce these risks.
The Rust for Linux project, led by Miguel Ojeda, began in 2021 with the goal of supporting Rust in kernel development.
This effort gained momentum when Rust was officially merged into the Linux kernel in October 2022.
Progress and Benefits
New code written in Rust benefits from the language’s inherent properties, which minimize the risk of memory safety bugs, data races, and logic bugs.
This makes it easier for maintainers to refactor and accept patches for modules, as they can rely on Rust’s safe subset.
Additionally, Rust’s modern language features and detailed documentation make it easier to write new drivers and modules.
The use of Rust also attracts more developers to kernel development due to its modernity and robust tooling, which helps enforce documentation guidelines.
For instance, all public APIs, safety preconditions, ‘unsafe’ blocks, and type invariants must be documented, ensuring clarity and safety.
The project’s success is underscored by the growing acceptance of Rust in various kernel subsystems.
Multiple companies now have dedicated engineers working on Rust for the Linux kernel, reflecting its viability and desirability for kernel development.
As noted by kernel maintainer Jonathan Corbet, the Rust for Linux project has already achieved a significant goal by proving Rust’s suitability for kernel development, which is crucial for the long-term viability of Linux.
Future Developments
Several Rust-based drivers are currently being developed, including PHY drivers, the Null Block driver, and the Apple AGX GPU driver.
According to the Promisso Report, these efforts are expected to lead to the integration of Rust drivers into the mainline kernel within the next 12-18 months.
The recent merge of Rust misc driver bindings marks a tipping point, enabling more driver subsystems to accept Rust drivers.
This progress is expected to enhance the security of products and services running Linux with Rust drivers, ultimately benefiting users by providing a more secure computing environment.
The Alpha-Omega project’s financial support and Miguel Ojeda’s tireless efforts have been instrumental in driving this initiative forward.
