NVIDIA's Approach for Achieving ASIL B Qualified Linux

Explore NVIDIA's comprehensive approach to qualifying Linux for safety-critical automotive applications in this 40-minute conference talk from the Linux Plumbers Conference. Learn how to achieve ASIL B certification for Linux systems according to ISO 26262:2018 standards, treating Linux as a Safety Element out of Context (SEooC) within a defined safety architecture. Discover the qualification methodology that encompasses the Linux kernel, user space libraries like libc, and user-space components such as init processes. Understand how to define safety use cases that address kernel safety functions and technical safety requirements designed to mitigate kernel-related hazards in automotive environments. Examine the implementation of additional safety measures through both avoidance and monitoring mechanisms, which can be deployed within the Linux kernel or as external components. Gain insights into how this approach allows qualification efforts to focus on specific kernel areas or external components rather than requiring certification of the entire kernel, making Linux viable for safety-critical automotive applications while maintaining the benefits of open-source operating systems.

Syllabus

This talk presents a safety integrity qualification approach for Linux—comprising the Linux kernel, user space libraries e.g. libc, and user-space components e.g. init processes—up to ASIL B per ISO 26218. Linux is treated as a SEooC within an assumed architecture supporting defined safety use cases. These use cases address kernel safety functions and technical safety requirements designed to mitigate kernel-related hazards.