x86 Kernel Shadow Stacks Being Worked On For Linux As Powerful Control Flow Protection

T2Covered by 1 source · first reported by Phoronix at 22 Oct, 13:22 UTC

Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks. Intel Tigerlake and newer CPUs or AMD Zen 3 and newer have the necessary hardware shadow stacks support. Shadow stacks have been…