On Fri, 9 Oct 2020, Kees Cook wrote:
Store the freelist pointer out of line when object_size is smaller than sizeof(void *) and redzoning is enabled.
(Note that no caches with such a size are known to exist in the kernel currently.)
Ummm... The smallest allowable cache size is sizeof(void *) as I recall.
mm/slab_common.c::kmem_sanity_check() checks the sizes when caches are created.
NAK.