On Fri, Apr 22, 2022 at 10:08 AM Linus Torvalds wrote: > > Just opt-in with the mappings that matter. Actually, we could automatically opt-in a few common cases that we know are fundamentally ok, because they already can't play protection games. In particular, kvmalloc(). So I think something like this patch - along with Song's patch to enable it for alloc_large_system_hash() - would be fairly safe, and avoid any nasty cases. And probably catch quite a lot of the cases that matter that can grow large. Linus