feat(defconfig): CONFIG_KFENCE=y — production memory-safety sampling #29

Merged

pipeline-bot merged 1 commit from feat/defconfig-kfence into trunk 2026-08-18 17:05:07 +00:00

Conversation 0 Commits 1 Files changed 1 +1

sean commented 2026-08-18 16:47:56 +00:00

Owner

Copy link

Roll 2 of 3 (second timed run): KFENCE sampling detector, reports feed the efi_pstore forensics path. One variable per roll.

Roll 2 of 3 (second timed run): KFENCE sampling detector, reports feed the efi_pstore forensics path. One variable per roll.

sean added 1 commit 2026-08-18 16:47:56 +00:00

feat(defconfig): CONFIG_KFENCE=y — production memory-safety sampling ... 74fe793953

KFENCE is the low-overhead, sampling-based detector built for exactly
this deployment shape: always-on in production, catching heap
out-of-bounds/use-after-free with near-zero cost, reporting through
dmesg into the reset-durable efi_pstore forensics path the sf34..36
rolls built. One variable per roll.

pipeline-bot merged commit 74fe793953 into trunk 2026-08-18 17:05:07 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/linux!29

No description provided.