CONFIG_RANDOMIZE_MEMORY: Randomize the kernel memory sections

General informations

The Linux kernel configuration item CONFIG_RANDOMIZE_MEMORY:

• prompt: Randomize the kernel memory sections
• type: bool
• depends on: ( CONFIG_X86_64 ) && ( CONFIG_RANDOMIZE_BASE )
• defined in arch/x86/Kconfig
• found in Linux kernels: 4.8–4.20, 5.0–5.19, 6.0–6.11, 6.12-rc+HEAD

Help text

Randomizes the base virtual address of kernel memory sections (physical memory mapping, vmalloc & vmemmap). This security feature makes exploits relying on predictable memory locations less reliable.

The order of allocations remains unchanged. Entropy is generated in the same way as RANDOMIZE_BASE. Current implementation in the optimal configuration have in average 30,000 different possible virtual addresses for each memory section.

If unsure, say Y.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: