Nvidia engineer Sasha Levin has introduced a new mechanism for the Linux kernel that allows privileged operators to temporarily disable specific kernel functions. This can be done by returning a fixed value instead of executing the function, serving as a stopgap security measure while official patches are being developed.
Levin explained that this "killswitch" enables a privileged operator to make a chosen kernel function return a predetermined value without running its code. The purpose is to provide a temporary mitigation for security vulnerabilities during the period between disclosure and the release of a proper fix.
When a security issue becomes public, Linux systems are often more vulnerable until a fix is released. The killswitch would allow administrators to disable a specific vulnerable function in the kernel rather than running a system with a known flaw or rolling back to an older kernel version.
