x86 Kernel Shadow Stacks Being Worked On For Linux As Powerful Control Flow Protection
Linux user-space for several years had shadow stack support for hardware-enforced control-flow enforcement in defending against return oriented programming (ROP) attacks. Intel Tigerlake and newer CPUs or AMD Zen 3 and newer have the necessary hardware shadow stacks support. Shadow stacks have been effective for helping user-space software fend ROP attacks while now there is new work toward…
We haven't written up this one. Phoronix has the full story — the link below goes straight to it.