From: Rafael Aquini <[email protected]> configs/common/generic: disable CONFIG_SLAB_MERGE_DEFAULT
This is desired to reduce the risk of kernel heap overflows being able to overwrite objects from merged caches, and it changes the requirements for cache layout control, increasing the difficulty of these attacks. It also in increases the reliability and protection against object data corruption due to use-after-free and double-free class of bugs, as by keeping caches unmerged, these kinds of issues can only damage objects in the same cache. CONFIG_SLAB_MERGE_DEFAULT=n has been the default setting since RHEL-8 Signed-off-by: Rafael Aquini <[email protected]> diff a/redhat/configs/common/generic/CONFIG_SLAB_MERGE_DEFAULT b/redhat/configs/common/generic/CONFIG_SLAB_MERGE_DEFAULT --- a/redhat/configs/common/generic/CONFIG_SLAB_MERGE_DEFAULT +++ b/redhat/configs/common/generic/CONFIG_SLAB_MERGE_DEFAULT @@ -1 +1 @@ -CONFIG_SLAB_MERGE_DEFAULT=y +CONFIG_SLAB_MERGE_DEFAULT=n -- https://gitlab.com/cki-project/kernel-ark/-/merge_requests/990 _______________________________________________ kernel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
