Ugh. Everyone building with CONFIG_XEN_PV=y has always had a trivial local KASLR exposure via /sys/kernel/notes
https://lore.kernel.org/linux-hardening/202402180028.6DB512C50@keescook/
Also, I had to write my own .notes parser. Is there already one somewhere? It's a simple format, but still.
https://docs.oracle.com/cd/E23824_01/html/819-0690/chapter6-18048.html