This commit is contained in:
Patrick Schleizer 2025-10-10 06:53:04 -04:00
parent 28a88c7091
commit 98f27c3b2e
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48

View file

@ -194,6 +194,7 @@ Kernel space:
- Enable sanity checks and red zoning via slab debugging. This will implicitly - Enable sanity checks and red zoning via slab debugging. This will implicitly
disable kernel pointer hashing, leaking very sensitive information to root. disable kernel pointer hashing, leaking very sensitive information to root.
Re-enabling hashed pointers will be possible when using Linux kernel >= 6.17. Re-enabling hashed pointers will be possible when using Linux kernel >= 6.17.
https://github.com/Kicksecure/security-misc/issues/253
- Enable memory zeroing at both allocation and free time, which mitigates some - Enable memory zeroing at both allocation and free time, which mitigates some
use-after-free vulnerabilities by erasing sensitive information in memory. use-after-free vulnerabilities by erasing sensitive information in memory.