not available in most Linux distributions

settable only by configuration

not available in virtual machines

usable to mitigate hardware vulnerabilities such as Meltdown and Spectre

sometimes including out-of-mainstream Linux kernel developments such as GRsecurity

available only for Intel and AMD processors architectures

mostly proprietary

settable by dynamic parameters