Building on the excellent codetag/alloc_tag infrastructure recently added to Linux, I've got an initial implementation of per-call-site kmalloc cache isolation:
https://lore.kernel.org/lkml/20240809072532.work.266-kees@kernel.org/
It's sure to give @vbabka nightmares and frustrate shared-cache use-after-free exploits. 😁
@vbabka And, the fix[1] is pushed. I confirmed it works as below:
$ cat slab_pixel
11111 11
11 11 11
11 11111
11111111
11
11
11111111
11 11
11111111
11111111
11 11 11
111111
$ ./pixels_to_access_config.py slab_pixel $((100* 1024*1024)) 250 slab.cfg
$ sudo ../damo/damo record "./masim ./slab.cfg"
$ sudo ../damo/damo report heatmap --output slab.png
[1] https://github.com/awslabs/damo/commit/7d6fd42371cc6a1611da72fde6076ca7b5ad1b37

[$] How kernel CVE numbers are assigned
It has been four months since Greg Kroah-Hartman and MITRE announced that the Linux kernel project had become its own CVE Numbering Authority (CNA). Since then, the Linux CNA Team [...]