When the kernel is running, it has access to its entire address space —
usually including all of physical memory — even
if only a small portion of that address space is actually needed. That
increases the kernel's vulnerability to speculative attacks. An…