FineIBT Updated For Linux As Alternative Control Flow Integrity (CFI) Approach

[Jannik2099]

Wouldn't this carry a needless overhead in the cases where clang can prove the indirect call target at compile time, since the hash is now unavoidable?

[phoronix]

Phoronix: FineIBT Updated For Linux As Alternative Control Flow Integrity (CFI) Approach

Back in August 2021 saw initial patches by Intel for "FineIBT" for the Linux kernel as aiming to combine the best of their Control-flow Enforcement Technology (CET) and Control Flow Integrity for upping the kernel security protections in an efficient manner...

https://www.phoronix.com/news/FineIBT-Linux-Updated