| Technique | HEAD rev / patch |
|---|---|
| Prevent memory access in privileged modes | |
| amd64 Supervisor Mode Access Prevention (SMAP) | r336876 |
| arm64 Privileged Access Never (PAN) | r316756 |
| Prevent execution in privileged modes | |
| amd64 Supervisor Mode Execution Prevention (SMEP) | r242433 |
| arm64 Privileged Execute Never (PXN) | r316761 |
| Limit permissions on kernel memory | |
| Direct map | r316767 |
| Kernel stacks | r329281 |
| Recursive page table mappings | r330511 |
| Kernel .text, .data, .bss | r330539 |
| UMA and malloc(9) | r335068 |
| pipe_map and exec_map | r340205 |
| Kernel module .text, .data, .bss | PR 228927 |
The topic was discussed at the August 2017 Cambridge Summit - notes at Security_mitigation