Linux can be configured to require that kernel modules be digitally signed. On kernels built for embedded devices and consumer devices (i.e., tablets, smartphones, etc.), I can still see that this leaves a hole open for using modules made for older releases to exploit newer ones if both kernels use the same key. Does Linux provide a facility for refusing to load kernel modules from a different version?
Kernel module version enforcement
linux kernel;kernel modules;version;signature