feat(defconfig): CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y #27

Merged

pipeline-bot merged 1 commit from feat/defconfig-kstack-offset into trunk 2026-08-18 15:33:56 +00:00

Conversation 0 Commits 1 Files changed 1 +1

sean commented 2026-08-18 15:21:42 +00:00

Owner

Copy link

Roll 1 of 3 timed bumps (second run): per-syscall stack-offset randomization on by default. One variable per roll.

Roll 1 of 3 timed bumps (second run): per-syscall stack-offset randomization on by default. One variable per roll.

sean added 1 commit 2026-08-18 15:21:42 +00:00

feat(defconfig): CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT=y ... 4ca9614566

Per-syscall kernel stack offset randomization, on by default (still
run-time togglable). On a platform whose stated purpose is arbitrary
code execution as a service, stack-offset determinism is a gift to
exploit chains; the ~1% syscall cost buys it back. One variable per
roll.

pipeline-bot merged commit 4ca9614566 into trunk 2026-08-18 15:33:56 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/linux!27

No description provided.