[$] Two address-space-isolation patches get closer
Address-space isolation is the technique of removing a range of memory fromone or more address spaces as a way of preventing accidental or maliciousaccess to that memory. Since the disclosure of the Meltdown and Spectrevulnerabilities, the kernel has used one formof address-space isolation to make kernel memory completelyinaccessible to user-space processes, for example. There has been a steadylevel of interest in using similar techniques to protect memory in othercontexts; two patches implementing new isolation mechanisms are gettingcloser to being ready for merging into the mainline kernel.