Bug 12364 - CONFIG_RANDOMIZE_MEMORY is enabled on x86_64 only
Summary: CONFIG_RANDOMIZE_MEMORY is enabled on x86_64 only
Status: CLOSED ERRATA
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: unspecified All
: Will affect an average number of users Security
Assignee: Peter Müller
QA Contact:
URL:
Keywords:
Depends on:
Blocks: KERNSEC
  Show dependency tree / graph
 
Reported: 2020-04-14 15:20 UTC by Peter Müller
Modified: 2022-07-28 14:00 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Peter Müller 2020-04-14 15:20:03 UTC 
Quote from https://capsule8.com/blog/kernel-configuration-glossary/:

> Significance: Critical
> 
> Randomizes the base virtual address of kernel memory sections (physical memory
> mapping vmalloc & vmemmap). This security feature makes exploits relying on
> predictable memory locations less reliable.
Comment 1 Peter Müller 2020-06-09 17:17:15 UTC 
https://patchwork.ipfire.org/patch/3171/
Comment 2 Peter Müller 2022-07-28 14:00:42 UTC 
Sigh, this one is not available for any other architecture than x86.