ConceptSupervisor Mode Access Prevention
SMAP
SMAP is a security feature at the CPU level that prevents kernel-mode code from accessing data in user-mode memory. Combined with SMEP, it effectively increases the difficulty of exploiting kernel vulnerabilities.
Timeline (last 90 days)
Oct 16
In kernel scenarios, successfully exploiting a vulnerability requires breaking through multiple layers of mitigations such as KASLR, SMEP, SMAP, and stack protection, and often requires building a complete exploit chain with techniques such as heap spraying, ROP, or data-oriented attacks.
Unverified50%