Kees Cook, former chief sysadmin of kernel.org and leader of the Ubuntu Security Team, now working at Google on securing Android and ChromeOS, experimental with patches that allow building the kernel for x86_64 architecture using the Clang compiler and activating the CFI (Control Flow Integrity) protection mechanism. CFI provides detection of some forms of undefined behavior that can potentially disrupt the normal control flow due to exploit execution.
Recall that in the necessary changes were included to build the Linux kernel using Clang for x86_64 architecture systems. The Android and ChromeOS projects already Clang to build the kernel, and Google is testing Clang as the main platform for building kernels for its Linux desktop systems. Kernel variants built using Clang also support projects and .
Source: opennet.ru
