Developers at IBM are working on a new concept for the Linux kernel of “system call isolation” in order to isolate parts of the kernel when impacted by vulnerabilities…

Source: Phoronix – IBM Developers Looking At Adding System Call Isolation To Enhance Linux Security