[PATCH v8] arm64: mm: Unmap kernel data/bss entirely from the linear map
Will Deacon
will at kernel.org
Fri Aug 7 07:22:46 PDT 2026
On Mon, 03 Aug 2026 18:33:47 +0200, Ard Biesheuvel wrote:
> The linear aliases of the kernel text and rodata are also mapped
> read-only in the linear map. Given that the contents of these regions
> are mostly identical to the version in the loadable image, mapping them
> read-only and leaving their contents visible is a reasonable hardening
> measure.
>
> Data and bss, however, are now also mapped read-only but the contents of
> these regions are more likely to contain data that we'd rather not leak.
> So let's unmap these entirely in the linear map when the kernel is
> running normally.
>
> [...]
Applied to arm64 (for-next/mm), thanks!
[1/1] arm64: mm: Unmap kernel data/bss entirely from the linear map
https://git.kernel.org/arm64/c/fb0f3ef5601a
Cheers,
--
Will
https://fixes.arm64.dev
https://next.arm64.dev
https://will.arm64.dev
More information about the linux-arm-kernel
mailing list