Worth considering for default use if perf is acceptable. This feature guards against some memory corruption attacks.

Due to the performance/memory costs of the proposed Page Table Check, it would be off by default. Activation would require building with the PAGE_TABLE_CHECK build option enabled plus booting the kernel with the page_table_check=on parameter to enable it at run-time.

1 Like