NVIDIA's Approach for Achieving ASIL B Qualified Linux
Talkat Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025 · 2025-12-08..12-10·
summary
NVIDIA proposes qualifying Linux up to ASIL B per ISO 26262:2018 by treating Linux as an SEooC and adding per‑integrity alternate page tables (contexts) plus small, safety‑certified monitors that validate allocations and boundary crossings. Implementation keeps most kernel code at QM, moves only mapped drivers/libs into scope, and accepts memory and context‑switch overhead as a tunable tradeoff. A third‑party assessor reviews the concept and agrees it can meet ASIL B; work continues with ELISA and internal tooling toward implementation and potential ASIL D scaling.
AI-written summary · about
chapters (12)
- 0:00Introduction
- 3:48NVIDIA Halos safety ecosystem
- 6:59Safety challenges in Linux
- 9:27Why Linux is hard for safety
- 12:37Cost of traditional safety certification
- 15:03Flaws in traditional Linux safety
- 18:35Kernel spatial interference problem
- 21:02Kernel contexts for safety isolation
- 23:56Memory and context switching for safety
- 28:35Safety certification scope
- 31:03Next steps and collaboration
- 32:06Q&A
related talks
36mAligning Automotive Standards with Open Source Excellence
46mA Maintainable, Scalable, and Verifiable SW Qualification Approach for Automotive in Linux
45mLooking at Linux as a SEooC
42mProtecting the Linux Kernel from Confidential Computing Threats in Virtual Environments
35mOpen Sesame! Why Functional Safety is the Master Key to Open the Door for Linux into Automotive
16mAutomotive Solution Empowered by RISC-V Based Security and Functional Safety Module
32mDeveloping Open Source for Safety and Security
40mThe Xen Safety Concept, a Major Milestone Toward Certification