Skip to content

Commit

Permalink
slab canaries are disabled when using kernel MTE
Browse files Browse the repository at this point in the history
  • Loading branch information
thestinger committed Jan 15, 2025
1 parent 2a64e9c commit 73426a0
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions static/releases.html
Original file line number Diff line number Diff line change
Expand Up @@ -560,6 +560,7 @@ <h3><a href="#2025011500">2025011500</a></h3>
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): enable hardware memory tagging for the main kernel allocators via the upstream Hardware Tag-Based KASAN implementation (which is intended for production usage, unlike the other KASAN modes)</li>
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): switch KASAN fault handling from report to panic to use it as a hardening feature instead of only a bug finding tool</li>
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): switch KASAN hardware memory tagging mode from synchronous to asymmetric for the initial deployment to reduce the performance cost and match our existing hardware memory tagging usage in userspace (synchronous mode is potentially more useful in the kernel than it is for userspace which is something we can investigate and potentially offer as an option)</li>
<li>kernel (Pixel 8, Pixel 8 Pro, Pixel 8a, Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold): disable our slab canary feature since it's incompatible with the kernel's hardware memory tagging and will be obsolete after we've made basic improvements to the upstream hardware memory tagging implementation</li>
<li>Updater: require TLSv1.3 instead of either TLSv1.2 or TLSv1.3</li>
<li>kernel (5.10): update to latest GKI LTS branch revision including update to 5.10.233</li>
<li>kernel (5.15): update to latest GKI LTS branch revision including update to 5.15.176</li>
Expand Down

0 comments on commit 73426a0

Please sign in to comment.