Guess I am missing something, but can you please point me to the fast implementation(that benefits from bit 63 being user/kernel address disambiguation bit) and the strict checking in 32bit kernels that are you are referring to? Also I wonder here why ARM64 TBI which also uses the full upper byte (including bit 63) for storing tag/metadata doesn't suffer from this same problem? Regards, Bharata.