diff --git a/debian/changelog b/debian/changelog
index 6a8ce2791..0e75a4da1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,7 @@ linux (4.6-1~exp1) UNRELEASED; urgency=medium
   [ Ben Hutchings ]
   * Re-apply "[media] videobuf2-v4l2: Verify planes array in buffer dequeueing",
     reverted upstream in 4.6
+  * [arm64] Enable RANDOMIZE_BASE (kASLR)
 
  -- Ben Hutchings <ben@decadent.org.uk>  Mon, 16 May 2016 19:33:45 +0100
 
diff --git a/debian/config/arm64/config b/debian/config/arm64/config
index 882073f3d..8caba5852 100644
--- a/debian/config/arm64/config
+++ b/debian/config/arm64/config
@@ -6,6 +6,8 @@ CONFIG_PCI=y
 # CONFIG_ARM64_ERRATUM_843419 is not set
 CONFIG_SCHED_MC=y
 CONFIG_XEN=y
+CONFIG_RANDOMIZE_BASE=y
+CONFIG_RANDOMIZE_MODULE_REGION_FULL=y
 CONFIG_COMPAT=y
 
 ##