News › security
By Zayden R., July 3, 2026
Fedora 45 is considering enabling x86_64 Shadow Stack by default, aiming to bolster security on modern Intel and AMD systems. This change could bring significant protection improvements against return-oriented programming attacks.
Fedora Project developers are weighing a notable security enhancement for Fedora 45: enabling x86_64 Shadow Stack by default. This move aims to fortify defenses on modern Intel and AMD processors by leveraging a hardware feature designed to mitigate common attack vectors.
Shadow Stack is a security mechanism that helps prevent return-oriented programming (ROP) attacks by maintaining a separate stack for return addresses. With its activation, Fedora aims to enhance the system's ability to thwart malicious exploits that attempt to hijack control flow. Given the increasing sophistication of cyber threats, this addition could serve as a robust line of defense.
The proposal is focused on the x86_64 architecture, which remains prevalent in both consumer devices and enterprise environments. By default, Shadow Stack would be enabled on supported hardware, bringing a layer of protection that has been available but not widely utilized. This change could be particularly significant for sysadmins and security-conscious users who have long sought more rigorous built-in safeguards.
Technical details highlight that the Shadow Stack feature relies on CPU support, meaning its effectiveness will be contingent on the underlying hardware. Not all processors support this feature yet, but for those that do, the benefits are clear. Fedora's adoption of this security measure could set a precedent for other distributions to follow.
As Fedora continues its tradition of adopting cutting-edge technologies, this potential inclusion in Fedora 45 underscores the project's commitment to security. With the Linux community's consistent push for innovation, sysadmins have been waiting for such improvements that directly address modern security challenges.
The Linux Camp teaches these topics as hands-on labs on real virtual machines, verified as you type.