This is the documentation for the latest (main) development branch of Zephyr. If you are looking for the documentation of previous releases, use the drop-down menu on the left and select the desired version.

CONFIG_X86_KPTI

Enable kernel page table isolation

Type: bool

Help

Implements kernel page table isolation to mitigate Meltdown exploits
to read Kernel RAM. Incurs a significant performance cost for
user thread interrupts and system calls, and significant footprint
increase for additional page tables and trampoline stacks.

Direct dependencies

USERSPACE && !X86_NO_MELTDOWN && X86

(Includes any dependencies from ifs and menus.)

Default

  • y

Kconfig definition

At arch/x86/Kconfig:471

Included via Kconfig:8Kconfig.zephyr:39arch/Kconfig:12

Menu path: (Top) → X86 Architecture Options

config X86_KPTI
    bool "Enable kernel page table isolation"
    default y
    depends on USERSPACE && !X86_NO_MELTDOWN && X86
    help
      Implements kernel page table isolation to mitigate Meltdown exploits
      to read Kernel RAM. Incurs a significant performance cost for
      user thread interrupts and system calls, and significant footprint
      increase for additional page tables and trampoline stacks.

(The ‘depends on’ condition includes propagated dependencies from ifs and menus.)