Going to be using Android 11 kernels for the final release of GrapheneOS based on Android 10. It has the 2020-09-01 patch level from the AOSP security patch bundle and the 2020-09-05 kernel patches via shipping the new kernels. Rest of 2020-09-05 will come with full Android 11.
Conversation
We've already ported our changes for the kernels. Unfortunately, some of the side channel mitigations were broken by upstream changes for the Pixel 4 kernel including upstream kernel hardening work. We'll be filing upstream issues but we can't dedicate time to it yet ourselves.
Replying to
Might have fixes for the side channel mitigations implemented.
Going to get the release done for the Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL before looking into this further.
These kernels will be identical for the branch based on Android 10 anyway.
1
8