diff --git a/pkgs/os-specific/linux/kernel/common-config.nix b/pkgs/os-specific/linux/kernel/common-config.nix index 91bea44bf1a7..b30adcd27ea4 100644 --- a/pkgs/os-specific/linux/kernel/common-config.nix +++ b/pkgs/os-specific/linux/kernel/common-config.nix @@ -861,13 +861,15 @@ let # enable temporary caching of the last request_key() result KEYS_REQUEST_CACHE = yes; # randomized slab caches - RANDOM_KMALLOC_CACHES = whenAtLeast "6.6" yes; + RANDOM_KMALLOC_CACHES = whenBetween "6.6" "7.2" yes; + KMALLOC_PARTITION_CACHES = whenAtLeast "7.2" yes; + KMALLOC_PARTITION_RANDOM = whenAtLeast "7.2" yes; # NIST SP800-90A DRBG modes - enabled by most distributions # and required by some out-of-tree modules (ShuffleCake) # This does not include the NSA-backdoored Dual-EC mode from the same NIST publication. - CRYPTO_DRBG_HASH = yes; - CRYPTO_DRBG_CTR = yes; + CRYPTO_DRBG_HASH = whenOlder "7.2" yes; + CRYPTO_DRBG_CTR = whenOlder "7.2" yes; # Enable KFENCE # See: https://docs.kernel.org/dev-tools/kfence.html diff --git a/pkgs/os-specific/linux/kernel/kernels-org.json b/pkgs/os-specific/linux/kernel/kernels-org.json index 1850e03a312b..b1bbd932a1ee 100644 --- a/pkgs/os-specific/linux/kernel/kernels-org.json +++ b/pkgs/os-specific/linux/kernel/kernels-org.json @@ -1,7 +1,7 @@ { "testing": { - "version": "7.1-rc7", - "hash": "sha256:1jncfqvbiwsvvhiqs23paiy7xvsbmqcpxj02jwvy0albp16kfxd7", + "version": "7.2-rc1", + "hash": "sha256:1gpwr6n3cc2hqg36gy9g9w4rxawpz3y126j752z4zyls6h80b43v", "lts": false }, "6.1": {