diff --git a/base/linux/arch/config-common.sh b/base/linux/arch/config-common.sh
index dc9962261..4f54fe083 100644
--- a/base/linux/arch/config-common.sh
+++ b/base/linux/arch/config-common.sh
@@ -2,7 +2,7 @@
 # This copyright note is auto-generated by ./scripts/Create-CopyPatch.
 #
 # Filename: package/.../linux/arch/config-common.sh
-# Copyright (C) 2008 - 2011 The OpenSDE Project
+# Copyright (C) 2008 - 2012 The OpenSDE Project
 #
 # More information can be found in the files COPYING and README.
 #
@@ -45,6 +45,10 @@ CONFIG_DEBUG_.*=n
 CONFIG_.*_DEBUG=n
 CONFIG_REISERFS_CHECK=n
 
+# disable /dev/kmem by default (besides by rootkits it is used very rarely)
+# https://lkml.org/lkml/2008/2/10/328
+CONFIG_DEVKMEM=n
+
 # disable gcov kernel profiling support because it seems to be broken
 CONFIG_GCOV_KERNEL=n
 CONFIG_GCOV_PROFILE_ALL=n