CONFIG_ARM_PAN: Enable privileged no-access

General informations

The Linux kernel configuration item CONFIG_ARM_PAN:

• prompt: Enable privileged no-access
• type: bool
• depends on: CONFIG_MMU
• defined in arch/arm/Kconfig
• found in Linux kernels: 6.10–6.12, 6.13-rc+HEAD

Help text

Increase kernel security by ensuring that normal kernel accesses are unable to access userspace addresses. This can help prevent use-after-free bugs becoming an exploitable privilege escalation by ensuring that magic values (such as LIST_POISON) will always fault when dereferenced.

The implementation uses CPU domains when !ARM_LPAE and disabling of TTBR0 page table walks with ARM_LPAE.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: