ELISA

The Linux Foundation Europe Member Summit
2025-10-28
The Linux Foundation Europe Member Summit is an annual gathering for Linux Foundation Europe members, along with invited speakers, sponsors and media.
This event cultivates collaboration, open innovation, and partnerships among those in the private public sectors working to drive digital transformation through open collaboration. It is a must-attend for business and technical leaders looking to advance a Europe-wide open source strategy and mobilise resources in their organisations to collaboratively influence the largest shared technology investment of our time.
The event will feature prominent speakers from the private and public sectors and existing and upcoming Linux Foundation projects, as well as offer an opportunity for members of LF Europe to share their organisational priorities and put forward collaboration opportunities to the Linux Foundation Europe Advisory Board and membership at large.
Learn more and register for the event here.
The next day, the LF Europe Roadshow opens its doors to a wider audience of developers, policymakers, and community leaders. It will bring together developers, community leaders, industry, and policymakers for a full day of exchange. The program is built around two parallel tracks that reflect the most pressing themes for open source today.
The week concludes in Brussels with the European Open Source Security Forum, co-hosted by OpenSSF and the Centre for European Policy Studies (CEPS). This invite-only event will unite policymakers, security experts, and open source leaders to advance impactful security initiatives and policy efforts. The program will include:

Keynotes from European policymakers
Panels on regulation, CRA readiness, and emerging technologies such as quantum security
Targeted discussions on cybersecurity skills and future EU policy frameworks

This Forum provides a unique platform to align Europe’s policy direction with open source security priorities, ensuring that community voices are represented at the highest levels.
ELISA Project at the Linux Foundation Europe Member Summit

We are excited to share that at the upcoming Linux Foundation Europe Member Summit, ELISA Project Ambassador Philipp Ahmann (ETAS) will present “Driving Automotive with Open Source: From Compliance to Collaboration.”
Philipp will explore how automakers and suppliers can align safety and security requirements with open collaboration covering practical processes, tooling, and community models that turn compliance evidence into shared engineering momentum.
If you are attending, add this session to your agenda and connect with the ELISA Project to learn how our working groups help make Linux fit for safety-critical use. Learn more.
Philipp will also participate in a Panel Discussion: Open Source Enabling Industrial Innovation with Paul Brooks, Rockwell Automation; Christophe Villemer, Savoir-faire Linux; Renzo Cherin, Lloyds Banking Group moderated by Paula Grzegorzewska, Linux Foundation.
This session will bring together representatives from diverse vertical industries, including manufacturing, energy, finance, and beyond, to explore how open source is enabling them to achieve their strategic goals. Each panelist will begin with a 15-minute presentation highlighting experience in their specific sector. Then, we will host a 30min panel discussion which will examine the role of open source technologies and joint collaboration in fostering innovation, effectiveness, and long-term growth. Learn more.

ELISA Project at the Open Source Summit: Seoul, South Korea 2025
2025-11-04 - 2025-11-05
Open Source Summit is the premier event for open source developers, technologists, and community leaders to collaborate, share information, solve problems, and gain knowledge, furthering open source innovation and ensuring a sustainable open source ecosystem. It is the gathering place for open-source code and community contributors.
A Cross-Domain Home for the Entire Open Source Ecosystem
Open Source Summit is not a single-focus, niche event—it’s the big tent that unites the full spectrum of open source technologies and communities. Whether you work in cloud infrastructure, Linux kernel development, AI/ML, embedded systems, DevOps, security, or safety-critical systems, Open Source Summit offers a shared space to exchange ideas, make connections, and learn across domains. It’s where technologists who don’t typically land in the same room get a chance to collaborate.
At the same time, Open Source Summit brings in the leaders and practitioners who support the ecosystem from non-technical angles: open source program office (OSPO) staff, legal experts, policy advocates, standards organizations, equity champions, community managers, and foundation leaders. Together, they help shape the frameworks, culture, and strategy that make open source work.
A Strategic Gathering for Open Source’s Future
This event serves as a strategic checkpoint for the open source movement. It’s where conversations happen about not only what’s being built—but how and why. From sustainability and funding models to licensing, AI alignment, security, and governance, Open Source Summit brings clarity and direction to a fast-changing open source landscape.
Whether you’re deep in code or focused on enabling the communities and structures that support it, this is where your work gains momentum and impact.
ELISA Project will be part of the Safety Critical Software Track. This track explores the intersection of open source and safety standards, covering best practices for regulatory compliance, security updates, and safety engineering. Sessions will delve into requirements traceability, quality assessments, safety analysis methodologies, and technical development for safety-critical systems.
Safety Critical Software Track Sessions:
Driving Safety Forward: Lessons Learned From Deploying OSS in Real-world Automotive – Jaylin Yu, EMQ
Wednesday November 5, 2025 13:35 – 14:05 KST
While OSS in Automotive is seen as the holy grail to solve SDV complexity challenges with faster time to market and higher performance, it still lacks practical real-world examples and showcases that address OSS usage in compliance with the stringent safety and security demands of Automotive. In this talk, the author shares his real-world story of bringing OSS into mass production vehicles. This includes the impact of a healthy open-source community and how academic research helped solve security gaps, leading to increased system stability. This also embraces the impact of the software supply chain, providing a proven approach, refined through failures, helping to lower dependency risk for MQTT-based remote vehicle diagnostics.The session is rounded out by highlighting the link between system utilities and safety functions, covering time synchronization, dependency management, and data integrity within a Linux system, which impact the selection of a file system, and what happens when a customer suddenly requires STR. The audience will leave the session with a holistic impression of what to consider when creating a secure, safe, OSS-based SDV automotive system. Add this session to your schedule.
DO-330 Qualification of Enhanced LLVM Structural Coverage Tool – Minji Park & Seojin Kim, The Boeing Company
Wednesday November 5, 2025 14:15 – 14:45 KST
Structural coverage identifies parts of the code that were not exercised during testing, which is crucial for the reliability of safety-critical applications. The tools used in this verification process must be qualified for confident use.This talk introduces ongoing efforts at Boeing to qualify an enhanced LLVM structural coverage tool, an open-source solution, to comply with RTCA DO-330 standards. Our goal is to utilize this tool to generate coverage data and fulfill the code coverage requirements outlined in RTCA DO-178C for safety-critical avionics software.This talk is connected to the session, “Measuring Code Coverage of the Linux Kernel in Accordance with RTCA DO-178C Considerations,” presented at the 2024 Embedded Open Source Summit North America.The talk will provide an overview of the DO-330 requirements and outline our qualification steps, including validation and verification activities. These efforts are aimed at ensuring that the data generated by the tool is considered reliable evidence for DO-178C objectives. In addition, we will discuss the challenges faced during the qualification of this open-source tool and the approaches we have taken to overcome them. Add this session to your schedule.
Introduction and Consideration of Temporal Partitioning in Avionics With Open Source Eco-System – Haesun Kim & Gihwan Kwon, The Boeing Company
Wednesday November 5, 2025 14:55 – 15:25 KST
The ARINC 653 standard is crucial for the development of integrated modular avionics (IMA) systems, providing a framework for partitioning and managing resources in safety-critical applications. This presentation explores the requirements of ARINC 653 and the considerations necessary for implementing it within an open-source environment through an operating system. We discuss the motivation for adopting ARINC 653 in IMA systems and highlight how it extends beyond a traditional POSIX environment by offering enhanced capabilities for resource management and fault tolerance, which are essential for the rigorous demands of avionics systems. Add this session to your schedule.
Smarter Code, Sneakier Risks: Supply Chain Security in the Age of AI – Lavakush Biyani, Harness
Wednesday November 5, 2025 15:55 – 16:25 KST
AI-powered code assistance tools are reshaping how we develop software, but they also introduce new and unexpected security risks. While helpful, these tools can unintentionally introduce vulnerabilities by suggesting insecure, misleading, or unverified dependencies due to incomplete or inaccurate context. This creates new risks in the software supply chain.In this talk, we will explore real-world examples of AI-generated code leading to security issues and demonstrate how to detect these threats by analyzing code changes, generating AI Bills of Materials (AIBOMs), tracking unexpected dependencies, and monitoring builds for unusual behavior. We will also cover how to identify subtle risks such as dependency confusion by tracking package versions and changes over time.I will also cover how to add these checks into CI/CD pipelines without slowing down the development cycle, giving DevSecOps teams and developers practical ways to stay secure in an AI-driven world. Add this session to your schedule.
Detecting Double Free With BPF – Bojun Seo, LG Electronics
Wednesday November 5, 2025 16:35 – 17:05 KST
Double free vulnerabilities remain a critical security and safety issue in C and C++ programs. These errors, where memory is freed multiple times, can lead to crashes or exploitable security flaws. Developers usually rely on static and dynamic analysis tools, which effectively catch most issues during testing. However, detecting double frees in production environments, particularly in embedded systems, is challenging. The reason is that conventional debugging tools often alter the memory footprint and introduce significant overhead, frequently failing to reproduce the issue due to these changes, so-called Heisenbug. This talk introduces a novel double free detection tool leveraging BPF(Berkeley Packet Filter). By collecting data in a separate process, this tool preserves the target process’s memory footprint, minimizing interference. With significantly lower overhead compared to traditional debugging tools, it enhances the reliability of detecting double frees in production, especially in performance-sensitive embedded systems. I will demonstrate how BPF’s lightweight tracing capabilities improve memory safety, offering an effective solution for real-world double free detection. Add this session to your schedule.
Telco Supply Chain Security: Implementing ISO 18974 & SBOM – Haksung Jang, SK Telecom
Wednesday November 5, 2025 17:15 – 17:45 KST
As the digital transformation of the Telco industry accelerates, the use of open source is surging. However, this has also led to unprecedented complexity and security risks in the software supply chain. This session presents a core strategy to address these challenges: supply chain management centered on the latest international standard, ISO/IEC 18974 (Open Source Security Assurance), and SBOM (Software Bill of Materials). Based on SK Telecom OSPO’s real-world adoption case and the activities of the OpenChain Korea Work Group, we will share the practical process of establishing an open source security governance framework tailored for the Telco environment. Attendees will gain actionable guidance and lessons learned for policy-making, automated SBOM generation and verification, and collaboration with supply chain partners, moving beyond mere theory. Add this session to your schedule.

To learn more about the event and register, check here.

Open Source Summit: Tokyo, Japan 2025
2025-12-08 08:00 - 2025-12-10 17:00 (America/Los_Angeles)
Open Source Summit: Tokyo, Japan is the premier event for open source developers, technologists, and community leaders to collaborate, share information, solve problems, and gain knowledge, furthering open source innovation and ensuring a sustainable open source ecosystem. It is the gathering place for open-source code and community contributors.
Why Attend

Connect with the people shaping open source
Learn from maintainers, architects, and industry leaders
Discover new technologies and real-world solutions
Collaborate on ideas that move projects forward
Grow your skills, your network, and your career

ELISA project will be represented by our community members at the Safety Critical Track.
This track explores the intersection of open source and safety standards, covering best practices for regulatory compliance, security updates, and safety engineering. Sessions will delve into requirements traceability, quality assessments, safety analysis methodologies, and technical development for safety-critical systems. Learn more.

Safety Critical Track Highlights

Keynote: Space Grade Linux: Building a Safer, Open Source Future for Space Systems – Ramon Roche, General Manager, Dronecode Foundation – Wednesday December 10, 2025 09:10 – 09:25 JST

A Human-Centric Quality Assurance Process for Open Source Software Projects – Wendi Urribarri & Carlos Ramirez, Woven by Toyota – Wednesday December 10, 2025 11:10 – 11:50 JST
Comparison and Proposal of Vulnerability Management Approaches in Yocto-Based Linux for the CRA – Akihiko Takahashi, Fujitsu Limited – Wednesday December 10, 2025 12:00 – 12:40
JST
Driving Safety Forward: Lessons Learned From Deploying OSS in Real-world Automotive – Jaylin Yu, EMQ – Wednesday December 10, 2025 14:00 – 14:40 JST
Decoding Safe(ty) Linux Architectural Approaches for Critical Systems – Philipp Ahmann, Etas GmbH – Wednesday December 10, 2025 14:50 – 15:30 JST
LF Energy 101: How Open Source Is Powering the Digital Energy Transition – Darshan Chawda & Nao Nishijima, Hitachi -Wednesday December 10, 2025 16:40 – 17:20 JST

Learn more about the Safety Critical talks here.
Register for the event here.

Linux Plumbers Conference: Tokyo, Japan 2025
2025-12-11 - 2025-12-13
The Linux Plumbers Conference is the premier event for developers working at all levels of the plumbing layer and beyond.
Taking place on Thursday 11th, Friday 12th and Saturday 13th of December, this year we will be both in person and remote (hybrid). However to minimize technical issues, we’d appreciate most of the content presenters being in-person.
The in-person venue is the Toranomon Hills Forum, Tokyo, Japan.

LPC Microconference

A microconference contains several sessions based on the same general topic. Each session will be between 15 to 30 minutes in length and be discussion oriented.
Safe Systems with Linux MC
As Linux continues to be deployed in systems with varying criticality constraints, progress needs to be made in establishing consistent linkage between code, tests, and requirements, to improve overall efficiency and ability to support necessary analysis.
This MC addresses critical challenges in expectation management (aka requirements tracking), documentation, testing, and artifact sharing within the Linux kernel ecosystem. While tests are contributed for the code, traditionally the underlying requirement that the tests satisfies is likewise not documented in a structured manner. This has resulted in a large amount of “tribal knowledge” associated with subsystems, which results in technical debt when maintainers stop working on subsystems.
Taking in the feedback from last year’s “Safe Systems with Linux” miniconference 1, on how we can improve the documentation of the kernel’s design [1a] the ELISA (Enabling Linux in Safety Applications) community has focused on prototyping a template for capturing the requirements with volunteer linux kernel subsystem maintainers. The ELISA architecture team 2 has been meeting weekly and has developed a structured approach for documenting testable expectations with a template that allows embedding requirements directly with relevant code (as requested in the initial workshop) while maintaining machine readability and forming a base for improving testing with initiatives like KernelCI. The prototype format got initial review and feedback in December at the ELISA workshop at Goddard [3] and after incorporating that feedback in the workshop in Lund in May [4].
Initial pilots in the TRACING subsystem [5] have demonstrated the value of this approach, even resulting in the identification and fixing of previously unknown issues. [6,7]
Building on the last year’s discussions, the goal of this miniconference is to get wider feedback from additional maintainers and developers of different subsystems on the approach being proposed.
Potential Topics

Progress on Linux Kernel Requirements Framework
Discussing the SPDX-based template for low-level requirements, lessons learned from initial pilots, and plans for wider adoption.
Technical Debt Reduction
How documented requirements capture understanding of original functionality, and can be leveraged for verification when code needs to be rewritten (ie. C to Rust), etc.
Requirements-Driven Testing
How documented requirements can drive test case development and validation. Connecting relevant test cases with specific requirements and code, should be able to yield more efficient testing.
Semantic Aspects of Kernel Requirements
Exploring how to properly document expected behaviors with consideration for design elements that impact or are impacted by these behaviors.
Practical Implementation Challenges
Addressing the balance between detailed requirements documentation and maintaining kernel development velocity.
Required tools for automation
Progress on tools to generate, validate, and track work products increasing dependability throughout the kernel development process.
Industry Adoption
How safety-critical industries are beginning to leverage these developments for certification and compliance purposes. How their safety engineers can participate in contributing formalized requirements to the kernel and providing linkage.
Requirements as an Education Tool
How linux kernel documentation can mine the requirements, and help new contributors understand kernel functionality and design intent and attract new upsteam developers

Session Highlights:

Aspects of Dependable Linux Systems – Kate Stewart (Linux Foundation), Philipp Ahmann (Etas GmbH (BOSCH)) – 12 Dec 2025, 10:00
NVIDIA Approach for Achieving ASIL B Qualified Linux: minimizing expectations from upstream kernel processes -Igor Stoppa (nvidia) -12 Dec 2025, 10:10am
Applying Program Verification to Linux Kernel Code: Challenges, Practices, and Automation – Keisuke Nishimura – 12 Dec 2025, 10:35
Defining and maintaining requirements in the Linux Kernel – Chuck Wolber, Gabriele Paoloni (Red Hat), Kate Stewart (Linux Foundation) – 12 Dec 2025, 11:00
KUnit Testing Insufficiencies – Matthew Whitehead (The Boeing Company) – 12 Dec 2025, 12:00
Exploring possibilities for integrating StrictDoc with ELISA’s requirements template approach for the Linux kernel – Tobias Deiminger (Linutronix GmbH) – 12 Dec 2025, 12:25
BASIL: Open Source Traceability for Safety-Critical Systems” – Luigi Pellecchia – 12 Dec 2025, 12:40
Tooling and Sharing Traceability Discussion – Luigi Pellecchia, Matthew Whitehead (The Boeing Company), Tobias Deiminger (Linutronix GmbH) – 12 Dec 2025, 12:55
Wrap up and next steps – Kate Stewart (Linux Foundation), Philipp Ahmann (Etas GmbH (BOSCH)) – 12 Dec 2025, 13:20

Learn more about the sessions here.

ELISA Project at FOSDEM 2026
2026-01-31 - 2026-02-01
FOSDEM is a free event for software developers to meet, share ideas and collaborate. Every year, thousands of developers of free and open source software from all over the world gather at the event in Brussels.
The ELISA Project Ambassadors will be at FOSDEM 2026, actively participating across the event. They will be giving presentations, joining discussions, and meeting contributors and attendees in various developer rooms throughout the weekend. You can also connect with them at the Linux Foundation Europe stand, where they will be available to talk about ongoing work, community activities, and how to get involved with ELISA.
In addition, Philipp Ahmann, ELISA TSC Chair, Systems and Automotive WG Chair, and Sr. OSS Community Manager at ETAS GmbH (BOSCH), will be giving a talk at FOSDEM 2026. Philipp will also be at the Linux Foundation Europe stand throughout the weekend for anyone who would like to learn more about the ELISA Project, ask technical questions, or discuss collaboration opportunities.
From the TSC, Kate Stewart (VP, Dependable Embedded Systems, The Linux Foundation) and Nicole Pappler (Senior Safety Expert & Founder at AlektoMetis.com) will also be at FOSDEM.

Session Highlight:
Code, Compliance, and Confusion: Open Source in Safety-Critical Products
Open source is increasingly finding its place in functionally safe, safety-critical systems but adoption remains complex. This talk explores the rapid progress of OSS in functional safety across Linux, Zephyr, Xen, and automotive middleware, while also addressing the real barriers holding it back, from certification uncertainty to misunderstood safety concepts. Learn more.
BoF/Unconference
BOF: Linux & Open Source Software for safety applications in Railways (Jan 31, 2026 11:00 am – 11:55 am)
Digitization requires efficient software development. Today, this is no longer financially viable without the massive reuse of existing components and thus without the use of open source software as a generic product, also in the context of safety applications. Therefore, ways and means must be found to make open source software usable on a large scale for the railway sector. Due to the cooperative nature of open source software and the low competitive differentiation in the use of such generic products, the collaboration of various stakeholders from the sector under the governance of a Foundation can useful and important. This BOF wants to explore, if there is a critical mass to start a foundational backed project initiative for better spread of awareness for OSS in Railways and which activities exist to expand this approach for the safety-critical parts.
Safety-Critical Linux: Challenges across industries (Sat, Jan 31 – 12:00pm – 12:55pm)
Linux is being used more often in safety-critical areas like cars, planes, medical devices, robots, and trains. But each industry faces similar challenges when trying to meet safety and certification requirements. This BoF is an open discussion about those real-world problems: timing and determinism, documentation, certification, tooling, and system design. Anyone interested in safety-critical Linux is welcome to join, share experiences, ask questions, and explore where collaboration could help. Learn more.

Embedded Linux Conference & Open Source Summit - May 18-20, 2026, Minneapolis, Minnesota
2026-05-18 - 2026-05-20
Embedded Linux Conference (ELC) takes place alongside Open Source Summit, bringing together two of the most influential communities in open source.
Embedded Linux powers everything from automotive and industrial systems to healthcare devices and consumer electronics. For over two decades, ELC has been the premier vendor-neutral technical conference for developers and organizations building with Linux in embedded environments. It offers deep technical sessions, hands-on learning, and collaboration across kernel development, real-time systems, safety, security, and more.
Co-located with ELC, Open Source Summit is the leading gathering for open source developers, maintainers, and community leaders. It’s where the global open source community connects to share knowledge, collaborate on solutions, and drive innovation across technologies.
Together, these events provide a unique opportunity to:

Learn from experts building and maintaining critical open source technologies
Connect with developers, architects, and decision-makers across industries
Explore emerging trends in embedded systems, safety, security, and cloud-native technologies
Collaborate on real-world challenges and advance open source projects

The ELISA Project will participate in the Open Source Summit Safety Critical Software Track, contributing expertise on safety-critical systems and advancing the use of Linux in safety applications.
Join us to be part of the community shaping the future of embedded and open source innovation. Learn more about the ELC and Open Source Summit.
Read “What to expect from the ELISA Project at Open Source Summit 2026 – North America” to learn more about the safety critical software track sessions.

Open Source Summit 2026 - Mumbai, India
2026-06-16 - 2026-06-17
Open Source Summit is the premier event for open source developers and contributors. It’s where maintainers, technologists, and community leaders come together to share knowledge, collaborate on solutions, and push open source projects forward. It’s the home for code, community, and the people driving the future of open source.
Open Source Summit is not a single-focus, niche event—it’s the big tent that unites the full spectrum of open source technologies and communities. Whether you work in cloud infrastructure, Linux kernel development, AI/ML, embedded systems, DevOps, security, or safety-critical systems, Open Source Summit offers a shared space to exchange ideas, make connections, and learn across domains. It’s where technologists who don’t typically land in the same room get a chance to collaborate.
At the same time, Open Source Summit brings in the leaders and practitioners who support the ecosystem from non-technical angles: open source program office (OSPO) staff, legal experts, policy advocates, standards organizations, equity champions, community managers, and foundation leaders. Together, they help shape the frameworks, culture, and strategy that make open source work.
This event serves as a strategic checkpoint for the open source movement. It’s where conversations happen about not only what’s being built—but how and why. From sustainability and funding models to licensing, AI alignment, security, and governance, Open Source Summit brings clarity and direction to a fast-changing open source landscape.
Whether you’re deep in code or focused on enabling the communities and structures that support it, this is where your work gains momentum and impact.
Featured Tracks
Attendees can dive into a wide range of focused tracks, including:

CI/CD
Cloud & Orchestration
Embedded
Linux for Emerging Countries
Linux
Next Gen Open Technologies and Vertical Market Enablers
Open AI & Data
Open Source 101 (LF Education)
OSS Enabling & Management
Packages, Images, & Containers
Zephyr

Spotlight Tracks
Embedded:
The Embedded Track at Open Source Summit focuses on the software powering today’s connected devices, from edge systems and IoT to automotive and industrial platforms. Bringing together developers, maintainers, and architects, this track covers embedded Linux, real-time systems, firmware, security, device management, and hardware–software integration. Sessions highlight practical development techniques, performance optimization, upstream collaboration, and long-term maintenance strategies, offering attendees insights into building reliable, secure, and scalable embedded systems with open source.
Linux for emerging countries:
Deep-dive into how open source technologies, particularly Linux, serve as a foundation for digital growth, innovation, and self-reliance in developing economies. With its low cost, flexibility, and community-driven model, Linux enables governments, educational institutions, startups, and enterprises to build secure and scalable technology infrastructures without the financial and licensing barriers of proprietary systems. This conference track highlights the expanding adoption of Linux across emerging markets, showcases solutions built on Linux that address local and global challenges, and examines how free and open source software fosters skills development, entrepreneurship, and sustainable economic progress. Sessions will feature real-world success stories, policy perspectives, and community initiatives that demonstrate how open collaboration can accelerate technological advancement and create inclusive opportunities worldwide, and also discuss the challenges open-source technologies like Linux face in emerging countries.
Linux:
This track is for maintainers, developers and project leads in the Linux community to gather for updates, education, collaboration, and problem-solving to further the Linux ecosystem.
Learn more about the event and register here.

Open Source Summit 2026 - Seoul, Korea
2026-08-11 - 2026-08-12
Open Source Summit is the premier event for open source developers and contributors. It’s where maintainers, technologists, and community leaders come together to share knowledge, collaborate on solutions, and push open source projects forward. It’s the home for code, community, and the people driving the future of open source.
Open Source Summit is not a single-focus, niche event—it’s the big tent that unites the full spectrum of open source technologies and communities. Whether you work in cloud infrastructure, Linux kernel development, AI/ML, embedded systems, DevOps, security, or safety-critical systems, Open Source Summit offers a shared space to exchange ideas, make connections, and learn across domains. It’s where technologists who don’t typically land in the same room get a chance to collaborate.
At the same time, Open Source Summit brings in the leaders and practitioners who support the ecosystem from non-technical angles: open source program office (OSPO) staff, legal experts, policy advocates, standards organizations, equity champions, community managers, and foundation leaders. Together, they help shape the frameworks, culture, and strategy that make open source work.
This event serves as a strategic checkpoint for the open source movement. It’s where conversations happen about not only what’s being built—but how and why. From sustainability and funding models to licensing, AI alignment, security, and governance, Open Source Summit brings clarity and direction to a fast-changing open source landscape.
Whether you’re deep in code or focused on enabling the communities and structures that support it, this is where your work gains momentum and impact.
ELISA Project will be part of the Safety Critical Software Track. This track explores the intersection of open source and safety standards, covering best practices for regulatory compliance, security updates, and safety engineering. Sessions will delve into requirements traceability, quality assessments, safety analysis methodologies, and technical development for safety-critical systems.
Don’t forget to add these sessions to your schedule!
Tuesday August 11, 2026 11:00 – 11:30 KST – Sponsored Session: A New Security Standard for the AI Era: Zero-CVE and Real-Time Threat Response – SeungEll Lee, Red Hat
As Generative AI and Agentic AI continue to evolve, cyberattacks have become increasingly automated. With hundreds of new CVEs disclosed every day and AI-powered attacks are automated in zero-hour, traditional security and patch management approaches have reached their limits.
This session explores how organizations can build a lightweight hardened infrastructure and a trusted Zero-CVE environment with Red Hat AI on a proven platform that leverages the strengths of the open source ecosystem. It also examines the need for autonomous defense systems and approaches to implementing them, enabling real-time threat response while maintaining infrastructure stability through controlled AI-driven automation.
Wednesday August 12, 2026 15:55 – 16:25 KST – Case Studies of Existing Use of Linux in Safety-critical Domains – Nikita Verma, Individual & Harshita Varma, Independent
The automotive transition to Software-Defined Vehicles (SDVs) relies on mixed-criticality architectures, consolidating open-source infotainment (Automotive Grade Linux) alongside safety-critical Real-Time Operating Systems (RTOS). This virtualization boundary—often KVM/Xen—is assumed to be a secure airgap. However, guest-to-host communication requires hardware abstraction, primarily via the VirtIO standard.
This 40-minute session conducts a hardcore technical teardown of the virtqueue shared-memory mechanism, exposing how legacy C-based VirtIO backends (vhost-net) introduce critical vulnerabilities into the automotive supply chain.
We will dissect a hypervisor escape utilizing custom fuzzing. By crafting malformed descriptor chains to bypass frontend validation, a compromised guest can force the host’s backend into out-of-bounds memory corruption, effectively bridging the airgap into the control plane.
Finally, we will architect the open-source defense: migrating to memory-safe rust-vmm virtualization components to mathematically eliminate buffer overflows, and deploying zero-overhead eBPF probes for kernel-level I/O anomaly detection.
Wednesday August 12, 2026 16:35 – 17:05 KST – Using AI To Bridge the Gap Between Safety Standards and Open Source Development – Kate Stewart, The Linux Foundation
Popular open source operating systems like the Linux Kernel and Zephyr RTOS accept up to 9 commits per hour. Safety standards, like 61508, 26262, and others were developed without this rate of change in mind. Safety standards also expect the requirements to be explicit, which is not part of OS development processes. By using AI tools, we’re able to accelerate the analysis of OS code to derive the requirements and traceability to tests. By storing this info in tools that can import and export System Package Data eXchange (SPDX) 3.0+, we’re able to capture the requirements in a way that can be leveraged for wider system analysis necessary for safety. Associating integrity methods with the requirements and code snippets, also enables monitoring. Combining requirements traceability with precise build SBOM metadata, gives us a framework to keep a component compliant to a safety profile after a security fix.
This talk will provide a view on the latest experiments occurring with the Linux Kernel in the ELISA project, as well as in the Zephyr Safety Working group, and SPDX Functional Safety working group to extend SPDX to meet the needs of establishing these frameworks.
Learn more about the event and register here.

ELISA Project at Linux Plumbers Conference 2026: Safe Systems with Linux MC
2026-10-05 - 2026-10-07
The ELISA Project will be part of the Safe Systems with Linux Microconference at the Linux Plumbers Conference 2026, taking place October 5–7 at the Prague Congress Centre in Prague, Czechia, with hybrid participation available.
As Linux continues to be used in systems with varying levels of criticality, the need for clear traceability between requirements, code, and tests is becoming increasingly important. The Safe Systems with Linux MC will focus on how the Linux kernel ecosystem can better support structured requirements, documentation, testing, and artifact sharing while preserving the speed and flexibility of upstream development.
Building on discussions from previous years, this year’s microconference will explore approaches for expressing requirements and traceability as sidecar data structures. This makes the information more machine-readable, maintainable, and scalable without requiring kernel design documentation to live directly in the code.
Topics will include technical debt reduction, requirements-driven testing, semantic aspects of kernel requirements, progress on the Linux Kernel Requirements Framework, practical implementation challenges, automation tooling, connections with kernel quality initiatives, industry adoption, and the role of requirements as an education and onboarding tool.
The session aims to bring together kernel maintainers, developers, safety architects, tooling experts, and industry stakeholders to discuss how structured requirements and traceability practices can complement existing Linux kernel development workflows and support the creation of dependable, safety-relevant systems with Linux. Learn more.

Embedded Linux Conference & Open Source Summit Europe 2026
2026-10-07 - 2026-10-09
Open Source Summit is the premier event for open source developers and contributors. It’s where maintainers, technologists, and community leaders come together to share knowledge, collaborate on solutions, and push open source projects forward. It’s the home for code, community, and the people driving the future of open source.
The ELISA Project encourages submissions for Open Source Summit Europe 2026 across a broad range of topics related to safety-critical and embedded Linux systems.
Suggested topics for Open Source Summit Europe 2026 include safety-critical software, the interaction between open source software and safety standards, best practices for working with regulatory authorities, security updates for safety-critical systems, safety engineering in open source projects, quality assessments based on development data, requirements traceability and testability, development of safety-relevant technical features, safety analysis methodologies, and real-world case studies showcasing Linux in safety-critical domains such as aerospace, automotive, industrial, medical, and energy systems.
Learn more about the suggested tracks and suggested topics here.
Important dates to remember:

CFP Closes: Wednesday, 24 June at 23:59 CEST (UTC +2) / 14:59 PDT (UTC -7)
CFP Notifications: Friday, 24 July
Schedule Announcement: Wednesday, 29 July
Event Dates: Wednesday, 7 October – Friday, 9 October

Learn more about the Open Source Summit Europe conference here.
