Kernel Address Space Isolation Is Still Being Explored For Better Security

[phoronix]

Phoronix: Kernel Address Space Isolation Is Still Being Explored For Better Security

IBM developers and others continue exploring the potential for address space isolation in the Linux kernel to reduce the risk of leaking sensitive data in attacks like L1 Terminal Fault (L1TF), MDS, and other vulnerabilities. Though this does increase the complexity of the kernel code and the performance hit is still to be evaluated...

http://www.phoronix.com/scan.php?page=news_item&px=Address-Space-Isolation-OSE2019

[ferry]

.. in combination with moving code out of the kernel, eventually resembling a microkernel design (grabs popcorn).