From d3df9187159552c3aa1287e4fa017c2bf479855b Mon Sep 17 00:00:00 2001 From: Alyssa Ross Date: Mon, 29 Jun 2026 16:24:19 +0200 Subject: [PATCH] linux/common-config: update for 7.2-rc1 (cherry picked from commit 8c1c48baf88ac745fb9a91818cc05d844446ba39) --- pkgs/os-specific/linux/kernel/common-config.nix | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/pkgs/os-specific/linux/kernel/common-config.nix b/pkgs/os-specific/linux/kernel/common-config.nix index 84cf7322c046..92bb741c7e02 100644 --- a/pkgs/os-specific/linux/kernel/common-config.nix +++ b/pkgs/os-specific/linux/kernel/common-config.nix @@ -844,13 +844,15 @@ let # enable temporary caching of the last request_key() result KEYS_REQUEST_CACHE = yes; # randomized slab caches - RANDOM_KMALLOC_CACHES = whenAtLeast "6.6" yes; + RANDOM_KMALLOC_CACHES = whenBetween "6.6" "7.2" yes; + KMALLOC_PARTITION_CACHES = whenAtLeast "7.2" yes; + KMALLOC_PARTITION_RANDOM = whenAtLeast "7.2" yes; # NIST SP800-90A DRBG modes - enabled by most distributions # and required by some out-of-tree modules (ShuffleCake) # This does not include the NSA-backdoored Dual-EC mode from the same NIST publication. - CRYPTO_DRBG_HASH = yes; - CRYPTO_DRBG_CTR = yes; + CRYPTO_DRBG_HASH = whenOlder "7.2" yes; + CRYPTO_DRBG_CTR = whenOlder "7.2" yes; # Enable KFENCE # See: https://docs.kernel.org/dev-tools/kfence.html