On Tue, 7 Oct 2025 at 19:47, Christoph Lameter (Ampere) <[email protected]> wrote: > > On Tue, 7 Oct 2025, Kees Cook wrote: > > > But all of that is orthogonal to just _having_ the type info available. > > iOS did go the path of creating basically one slab cache for each > "type" of kmalloc for security reasons. > > See > https://security.apple.com/blog/towards-the-next-generation-of-xnu-memory-safety/
We can get something similar to that with: https://lore.kernel.org/all/[email protected]/ Pending compiler support which is going to become available in a few months (probably). That version used the existing RANDOM_KMALLOC_CACHES choice of 16 slab caches, but there's no fundamental limitation to go higher. Note, this mitigation is likely not as strong as we'd like to without SLAB_VIRTUAL (or so I'm told): https://lwn.net/Articles/944647/
