Re: [PATCH] x86/shstk: Provide kernel command line knob to disable

From: Peter Zijlstra

Date: Thu Apr 02 2026 - 11:59:52 EST


On Thu, Apr 02, 2026 at 05:44:05PM +0200, Mathias Krause wrote:
> Provide a kernel command line option 'shstk=off' to disable CET shadow
> stacks, much like 'ibt=off' can be used to disable CET IBT.
>
> With both set to off, it avoids setting CR4.CET on capable hardware to
> allow debugging related issues during early boot.

Why though?