CONFIG_RANDOM_KMALLOC_CACHES: Randomize slab caches for normal kmalloc

General informations

The Linux kernel configuration item CONFIG_RANDOM_KMALLOC_CACHES:

• prompt: Randomize slab caches for normal kmalloc
• type: bool
• depends on: ! CONFIG_SLUB_TINY
• defined in mm/Kconfig
• found in Linux kernels: 6.6–6.8, 6.9-rc+HEAD

Help text

A hardening feature that creates multiple copies of slab caches for normal kmalloc allocation and makes kmalloc randomly pick one based on code address, which makes the attackers more difficult to spray vulnerable memory objects on the heap for the purpose of exploiting memory vulnerabilities.

Currently the number of copies is set to 16, a reasonably large value that effectively diverges the memory objects allocated for different subsystems or modules into different caches, at the expense of a limited degree of memory and CPU overhead that relates to hardware and system workload.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: