Don’t Expose Kernel Addresses to Userspace

Did you know that some kernel interfaces contain memory addresses? On security constrained systems, this can be a problem, as it can allow an attacker to gain knowledge about the kernel address space. However, Linux provides a solution to this problem in the form of a sysctl option. We recommend to use this option to hide such information.