Make Kernel Image's Virtual Address Flexible - X86/PIE Implementation

Explore the implementation of X86 kernel relocation and learn how to build the X86_64 Linux kernel as Position Independent Executables (PIE) in this informative conference talk. Discover how making the kernel image's virtual address flexible can enhance security against code reuse attacks. Understand the limitations of the current X86_64 Linux kernel image location and how PIE can overcome these constraints. Learn about the benefits of placing the kernel in any virtual address, including the low half of the address space, to increase the number of possible locations and make it harder for attackers to guess the virtual address. Gain insights into the practical implementation of this security enhancement and its potential impact on kernel functionality and performance.

X86/Pie: Make Kernel Image's Virtual Address Flexible - Wenlong Hou, Ant Group