[PATCH v8] arm64: mm: Unmap kernel data/bss entirely from the linear map

Will Deacon will at kernel.org
Fri Aug 7 07:22:46 PDT 2026


On Mon, 03 Aug 2026 18:33:47 +0200, Ard Biesheuvel wrote:
> The linear aliases of the kernel text and rodata are also mapped
> read-only in the linear map. Given that the contents of these regions
> are mostly identical to the version in the loadable image, mapping them
> read-only and leaving their contents visible is a reasonable hardening
> measure.
> 
> Data and bss, however, are now also mapped read-only but the contents of
> these regions are more likely to contain data that we'd rather not leak.
> So let's unmap these entirely in the linear map when the kernel is
> running normally.
> 
> [...]

Applied to arm64 (for-next/mm), thanks!

[1/1] arm64: mm: Unmap kernel data/bss entirely from the linear map
      https://git.kernel.org/arm64/c/fb0f3ef5601a

Cheers,
-- 
Will

https://fixes.arm64.dev
https://next.arm64.dev
https://will.arm64.dev



More information about the linux-arm-kernel mailing list