From my dupe submission: https://news.ycombinator.com/item?id=21653796
This new proposed mitigation builds upon other work, such as libc/ld.so random re-linking at boot, and opportunistic enforcement of syscalls from only un-writable pages by default.