Component Type: kbuild config

Description: Support for randomizing kernel stack offset on syscall entry

More info: The kernel stack offset can be randomized (after pt_regs) by roughly 5 bits of entropy, frustrating memory corruption attacks that depend on stack address determinism or cross-syscall address exposures. The feature is controlled via the "randomize_kstack_offset=on/off" kernel boot param, and if turned off has zero overhead due to its use of static branches (see JUMP_LABEL). If unsure, say Y.

Build project: Kconfig (Linux kconfig) (Path: arch\Kconfig )

Other views: file explorer