https://outflux.net/blog/archives/2019/07/17/security-things-in-linux-v5-2/ `CONFIG_SHUFFLE_PAGE_ALLOCATOR` is enabled in the Debian kernel but this needs to be enabled at boot time with `page_alloc.shuffle=1`. This was suggested on https://gitlab.tails.boum.org/tails/tails/-/issues/18467#note_185432.