2 files changed, 4 insertions, 4 deletions

diff --git a/arch/arm64/kernel/kaslr.c b/arch/arm64/kernel/kaslr.c
index b09b6f75f759..06941c1fe418 100644
--- a/arch/arm64/kernel/kaslr.c
+++ b/arch/arm64/kernel/kaslr.c
@@ -145,15 +145,15 @@ u64 __init kaslr_early_init(u64 dt_phys)
 
         if (IS_ENABLED(CONFIG_RANDOMIZE_MODULE_REGION_FULL)) {
                 /*
-                 * Randomize the module region over a 4 GB window covering the
+                 * Randomize the module region over a 2 GB window covering the
                  * kernel. This reduces the risk of modules leaking information
                  * about the address of the kernel itself, but results in
                  * branches between modules and the core kernel that are
                  * resolved via PLTs. (Branches between modules will be
                  * resolved normally.)
                  */
-                module_range = SZ_4G - (u64)(_end - _stext);
-                module_alloc_base = max((u64)_end + offset - SZ_4G,
+                module_range = SZ_2G - (u64)(_end - _stext);
+                module_alloc_base = max((u64)_end + offset - SZ_2G,
                                         (u64)MODULES_VADDR);
         } else {
                 /*
diff --git a/arch/arm64/kernel/module.c b/arch/arm64/kernel/module.c
index f713e2fc4d75..1e418e69b58c 100644
--- a/arch/arm64/kernel/module.c
+++ b/arch/arm64/kernel/module.c
@@ -56,7 +56,7 @@ void *module_alloc(unsigned long size)
                  * can simply omit this fallback in that case.
                  */
                 p = __vmalloc_node_range(size, MODULE_ALIGN, module_alloc_base,
-                                module_alloc_base + SZ_4G, GFP_KERNEL,
+                                module_alloc_base + SZ_2G, GFP_KERNEL,
                                 PAGE_KERNEL_EXEC, 0, NUMA_NO_NODE,
                                 __builtin_return_address(0));