Right now the stack canary is hardcoded, which effectively makes the kernel vulnerable to buffer overflows since it's rather easy to go around it when the canary's value is known. Randomize it at boot and at program load.