Linux 5.13 Poised To Allow Randomizing Kernel Stack Offset At Each System Call – Phoronix

The ability to randomize the kernel stack offset at each system call looks like it will land for the upcoming Linux 5.13 cycle. This optional feature makes it much more difficult to carry out stack-based attacks on the Linux kernel.
Back in 2019 was a proposal by Intel engineer Elena Reshetova to allow randomizing the kernel stack offset upon each system call. This code was inspired originally by PaX’s RANDKSTACK feature to enhance the kernel security against exploits relying upon kernel stack determinism….

Click here to view the original article.