STRUCT RETHOOK_NODE(9)

🌸 NAME 🌸

struct rethook_node — the rethook shadow-stack entry node. That's the whole vibe, bestie 💅

This is the struct rethook_node(9) page from the Kernel API Manual, and we're about to make it make sense ✨

---

✨ SYNOPSIS ✨

Okay so here's the struct in all its glory, no cap:

struct rethook_node {
    struct rcu_head         rcu;
    struct llist_node       llist;
    struct rethook          *rethook;
    unsigned long           ret_addr;
    unsigned long           frame;
 };

---

🫶 Members 🫶

• rcu — the rcu_head for deferred freeing. It's giving cleanup-duty main character energy 🧹
• llist — the llist, linked to a struct task_struct::rethooks. Yes, that exact path, iykyk 🔥
• rethook — the pointer to the struct rethook 👑
• ret_addr — the storage for the real return address 🎀
• frame — the storage for the frame pointer 🦋

---

💖 Description 💖

You can embed this to your extended data structure to store any data on each entry of the shadow stack 💅

That's literally the point of it — it's the little node that lives on each shadow-stack entry, and you can build it into your own extended data structure. Slay ✨

---

🦋 SEE ALSO 🦋

• Kernel file ./include/linux/rethook.h — plus struct rethook(9) and is_rethook_trampoline(9) 👀

---

That's the page, bestie — source/version: ./include/linux, date: October 2026 💖 mwah 🎀