Subject	pkeys-based page table hardening
Author	kevin.brodsky@arm.com
Date	2026-05-26 11:15:50 +0000 UTC
Version	Version 5 Version 6 Version 7 Version 8 Version 9
Cc	akpm@linux-foundation.org broonie@kernel.org catalin.marinas@arm.com dave.hansen@linux.intel.com david@kernel.org ira.weiny@intel.com jannh@google.com jeffxu@chromium.org joey.gouly@arm.com kees@kernel.org kevin.brodsky@arm.com linusw@kernel.org linux-arm-kernel@lists.infradead.org linux-hardening@vger.kernel.org linux-mm@kvack.org ljs@kernel.org luto@kernel.org maz@kernel.org mbland@motorola.com peterz@infradead.org pierre.langlois@arm.com qperret@google.com rick.p.edgecombe@intel.com rppt@kernel.org ryan.roberts@arm.com tglx@kernel.org vbabka@kernel.org will@kernel.org willy@infradead.org x86@kernel.org yang@os.amperecomputing.com yeoreum.yun@arm.com

Patches (24)

Name	Content [All]
[PATCH RFC v8 01/24] mm: Introduce kpkeys	[Body]
[PATCH RFC v8 02/24] set_memory: Introduce set_memory_pkey() stub	[Body]
[PATCH RFC v8 03/24] arm64: mm: Enable overlays for all EL1 indirect permissions	[Body]
[PATCH RFC v8 04/24] arm64: Introduce por_elx_set_pkey_perms() helper	[Body]
[PATCH RFC v8 05/24] arm64: Implement asm/kpkeys.h using POE	[Body]
[PATCH RFC v8 06/24] arm64: set_memory: Implement set_memory_pkey()	[Body]
[PATCH RFC v8 07/24] arm64: Context-switch POR_EL1	[Body]
[PATCH RFC v8 08/24] arm64: Initialize POR_EL1 register on cpu_resume()	[Body]
[PATCH RFC v8 09/24] arm64: Enable kpkeys	[Body]
[PATCH RFC v8 10/24] memblock: Move INIT_MEMBLOCK_* macros to header	[Body]
[PATCH RFC v8 11/24] mm: kpkeys: Introduce kpkeys_hardened_pgtables feature	[Body]
[PATCH RFC v8 12/24] mm: kpkeys: Protect regular page tables	[Body]
[PATCH RFC v8 13/24] mm: kpkeys: Introduce early page table allocator	[Body]
[PATCH RFC v8 14/24] mm: kpkeys: Protect vmemmap page tables	[Body]
[PATCH RFC v8 15/24] mm: kpkeys: Introduce hook for protecting static page tables	[Body]
[PATCH RFC v8 16/24] arm64: kpkeys: Implement arch_supports_kpkeys_early()	[Body]
[PATCH RFC v8 17/24] arm64: kpkeys: Support KPKEYS_CTX_PGTABLES	[Body]
[PATCH RFC v8 18/24] arm64: kpkeys: Ensure the linear map can be modified	[Body]
[PATCH RFC v8 19/24] arm64: kpkeys: Protect early page tables	[Body]
[PATCH RFC v8 20/24] arm64: kpkeys: Protect init_pg_dir	[Body]
[PATCH RFC v8 21/24] arm64: kpkeys: Guard page table writes	[Body]
[PATCH RFC v8 22/24] arm64: kpkeys: Batch KPKEYS_CTX_PGTABLES switches	[Body]
[PATCH RFC v8 23/24] arm64: kpkeys: Enable kpkeys_hardened_pgtables support	[Body]
[PATCH RFC v8 24/24] mm: Add basic tests for kpkeys_hardened_pgtables	[Body]

Sessions