Jump to content

Supervisor Mode Access Prevention

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Mr RD (talk | contribs) at 21:22, 31 March 2016 (Fixing style/layout). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Supervisor Mode Access Prevention (SMAP) is a feature of some CPU implementations such as the Intel Broadwell (microarchitecture) that allows supervisor mode programs to optionally set user-space memory mappings so that access to those mappings from supervisor mode will cause a trap. This makes it harder for malicious programs to "trick" the kernel into using instructions or data from a user-space program.

References:

https://lwn.net/Articles/517475/
https://software.intel.com/en-us/articles/intel-xeon-processor-d-product-family-technical-overview#_Toc419802869