Ivan Fratric 💙💛
In isolation, https://project-zero.issues.chromium.org/issues/434269715 and https://project-zero.issues.chromium.org/issues/434208461 might not appear very critical. However, together they mean KASLR on Pixel is broken :(. Both of these issues have been declared "working as intended" by the respective vendors :(
Seth Jenkins
Oh also this, which is technically WAI but has the unfortunate side effect (because of linear map non-randomization) that instead of bypassing KASLR, you can just use 0xffffff8000010000 as your kernel base instead.... https://project-zero.issues.chromium.org/issues/434269715