This commit is contained in:
Patrick Schleizer 2025-10-10 06:53:04 -04:00
parent 28a88c7091
commit 98f27c3b2e
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

View file

@ -194,6 +194,7 @@ Kernel space:
- Enable sanity checks and red zoning via slab debugging. This will implicitly
disable kernel pointer hashing, leaking very sensitive information to root.
Re-enabling hashed pointers will be possible when using Linux kernel >= 6.17.
https://github.com/Kicksecure/security-misc/issues/253
- Enable memory zeroing at both allocation and free time, which mitigates some
use-after-free vulnerabilities by erasing sensitive information in memory.