CONFIG_KFENCE: KFENCE: low-overhead sampling-based memory safety error detector

General informations

The Linux kernel configuration item CONFIG_KFENCE:

• prompt: KFENCE: low-overhead sampling-based memory safety error detector
• type: bool
• depends on: CONFIG_HAVE_ARCH_KFENCE
• defined in lib/Kconfig.kfence
• found in Linux kernels: 5.12–5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

KFENCE is a low-overhead sampling-based detector of heap out-of-bounds access, use-after-free, and invalid-free errors. KFENCE is designed to have negligible cost to permit enabling it in production environments.

See Documentation/dev-tools/kfence.rst for more details.

Note that, KFENCE is not a substitute for explicit testing with tools such as KASAN. KFENCE can detect a subset of bugs that KASAN can detect, albeit at very different performance profiles. If you can afford to use KASAN, continue using KASAN, for example in test environments. If your kernel targets production use, and cannot enable KASAN due to its cost, consider using KFENCE.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: