0.12-rc1

the mnu kernel ChangeLog - version 0.12-rc1
- Release date: 2026-07-02
- Release creator: tas0dev

Changes:

• Remove kernel-side PS/2 data consumption and
  hand ownership of the i8042 controller to a
  user-space driver.
• Replace path/suffix based exec classification with
  manifest role based launch policy.
• Remove dedicated ServiceSpawn/DriverSpawn handling
  in favor of manifest-based generic exec.
• Add ServiceDelegateRegister and DriverSpawn syscalls
  for delegated service/driver launch control.
• Add kernel-side spawn delegate registry for
  service manager governed launch delegation.
• Add ext2 rootfs boot via cext-based
  disk/filesystem modules.
• Switch rootfs access and executable loading to the
  cext-backed path.
• Fixed MOC-SA-2026-0702-0001: In the mnu kernel's
  capability restriction processing,
  it is possible to add a restricted capability without
  verifying whether the caller actually possesses
  the parent capability.
• Fixed MOC-SA-2026-0702-0002: In the mnu kernel's
  physical memory mapping process,
  a physical address range specified by a user process
  can be mapped into user space without sufficient
  validation.
• Fixed MOC-SA-2026-0702-0003: In the SYSCALL entry
  handling of the mnu kernel, Rust functions or kernel
  metadata are accessed before switching to the kernel CR3.
• Publish execve and service launch fixes needed for
  userland spawn/exec flows.
• Add generic IRQ dispatch support used by cext-driven
  devices.
• Extend kernel I/O, file, and process syscalls for
  persistent rootfs writes.
• Add delegated ServiceSpawn/DriverSpawn control
  for service-manager mediated launch.
• Add MapPhysicalRange syscall dispatch and
  memory.phys.map grants for USB driver MMIO access.
• Replace raw virt-to-phys DMA setup with
  kernel-owned DMA allocation handles, pinned contiguous
  frames, per-process ownership tracking, and exit/exec
  cleanup.
• Restrict driver-side DMA/MMIO grants to the USB driver
  launch path instead of all drivers.
• Update security policy guidlines.

Full Changelog: 0.11...0.12-rc1

0.11

the mnu kernel ChangeLog - version 0.11
- Release date: 2026-06-20
- Release creator: tas0dev

Changes:

• Add ServiceDelegateRegister and DriverSpawn syscalls
  for delegated service/driver launch control.
• Add kernel-side spawn delegate registry for
  service manager governed launch delegation.
• Add ext2 rootfs boot via cext-based
  disk/filesystem modules.
• Switch rootfs access and executable loading to the
  cext-backed path.
• Publish execve and service launch fixes needed for
  userland spawn/exec flows.
• Add generic IRQ dispatch support used by cext-driven
  devices.
• Extend kernel I/O, file, and process syscalls for
  persistent rootfs writes.
• Add delegated ServiceSpawn/DriverSpawn control
  for service-manager mediated launch.

0.1

the mnu kernel ChangeLog - version 0.1
- Release date: 2026-06-18
- Release creator: tas0dev

Changes:

• First release of the mnu kernel.
• Added a path capability registry.
  gated actual path registration on
  capabilities.manage for services,
  and exposed registered maps in
  core.service.
• Create a security model based on
  binary signatures
• Fixed some syscalls security issues.
• Fixed many bugs / security issues.
• Create some scripts.
• Delete old source files and syscalls.
• Delete unused meta files.

Full Changelog: 0.1-rc2...0.1

---

the mnu kernel ChangeLog - version 0.1-rc2
- Release date: 2026-06-15
- Release creator: tas0dev

Changes:

• Fixed an issue that occurred when user
  copying failed while receiving an IPC external page
• Fixed an issue where drivers would be overwritten
  if PlugKit driver IDs were duplicated.
• Fixed an issue where unassigned PlugKit devices
  were being recognized as assigned.
• Fixed some bugs in the PlugKit.
• Fixed an issue where service permissions were
  being granted based solely on the path or filename.
• Fixed a vulnerability that allowed numerous
  capabilities to be bypassed
  when using Service privileges.
• Fixed an issue where services could be started
  when ProcessSpawn privileges were granted.
• Fixed an issue where fork() fell back to sharing
  the parent page table if clone failed
• Fixed a vulnerability where the Cext ELF loader
  could overwrite existing kernel mappings or load
  PT_LOAD segments outside the Cext-only virtual range.
• Fixed a vulnerability where physical address
  translation and physical page mapping were
  permitted through Service privileges instead of
  dedicated memory.phys.* capabilities, and target
  process access checks were missing.
• Updated the documentation to describe the new
  memory.phys.* capability split and target-process
  access requirements.
• Fine-tuning the behavior of the
  mmap/page fault handler.
• IPC full implementation.
• Delete unused files.
• Delete unused debug logs.
• Updated the documentations.
• Updated the cext build system.
• Create security guidelines.

Full Changelog: 0.1-rc1...0.1-rc2

0.1-rc2

the mnu kernel ChangeLog - version 0.1-rc2
- Release date: 2026-06-15
- Release creator: tas0dev

Changes:

• Fixed an issue that occurred when user
  copying failed while receiving an IPC external page
• Fixed an issue where drivers would be overwritten
  if PlugKit driver IDs were duplicated.
• Fixed an issue where unassigned PlugKit devices
  were being recognized as assigned.
• Fixed some bugs in the PlugKit.
• Fixed an issue where service permissions were
  being granted based solely on the path or filename.
• Fixed a vulnerability that allowed numerous
  capabilities to be bypassed
  when using Service privileges.
• Fixed an issue where services could be started
  when ProcessSpawn privileges were granted.
• Fixed an issue where fork() fell back to sharing
  the parent page table if clone failed
• Fixed a vulnerability where the Cext ELF loader
  could overwrite existing kernel mappings or load
  PT_LOAD segments outside the Cext-only virtual range.
• Fixed a vulnerability where physical address
  translation and physical page mapping were
  permitted through Service privileges instead of
  dedicated memory.phys.* capabilities, and target
  process access checks were missing.
• Updated the documentation to describe the new
  memory.phys.* capability split and target-process
  access requirements.
• Fine-tuning the behavior of the
  mmap/page fault handler.
• IPC full implementation.
• Delete unused files.
• Delete unused debug logs.
• Updated the documentations.
• Updated the cext build system.
• Create security guidelines.

Full Changelog: 0.1-rc1...0.1-rc2

0.1-rc1

the mnu kernel ChangeLog - version 0.1-rc1
Release date: 2026-06-14
Release creator: tas0dev

Changes:
- First Release

Full Changelog: https://github.com/mochiOS/mnu/commits/0.1-rc1