Going to be using Android 11 kernels for the final release of GrapheneOS based on Android 10. It has the 2020-09-01 patch level from the AOSP security patch bundle and the 2020-09-05 kernel patches via shipping the new kernels. Rest of 2020-09-05 will come with full Android 11.
Conversation
We've already ported our changes for the kernels. Unfortunately, some of the side channel mitigations were broken by upstream changes for the Pixel 4 kernel including upstream kernel hardening work. We'll be filing upstream issues but we can't dedicate time to it yet ourselves.
1
8
Might have fixes for the side channel mitigations implemented.
Going to get the release done for the Pixel 2, Pixel 2 XL, Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL before looking into this further.
These kernels will be identical for the branch based on Android 10 anyway.