Linux Is Getting an Emergency Kill Switch

Linux kernel developers are considering adding kill switches for potentially vulnerable kernel functions as an emergency security mitigation. Built on existing kernel machinery like KProbes, SecurityFS, and function error injection, the feature lets admins disable specific kernel code paths at runtime or boot time without patching. The interface exposes control files for engaging/disengaging functions, tracking hit counts, and audit logging. A taint bit marks any kernel modified by the kill switch. While useful as a stopgap between vulnerability discovery and patch deployment — especially for large server fleets — the feature is explicitly a blunt instrument that can cause crashes if misused, and must not be treated as a substitute for proper patching.