🛡️ Security

Kernel Module

A piece of kernel code (driver, filesystem, protocol or crypto component) that is loaded into a running Linux kernel on demand rather than compiled in. Blocking a vulnerable module from loading is a common stopgap mitigation until a patched kernel can be booted.

📚 Deep Dive

Learn Article

How to Blacklist a Kernel Module as a Stopgap Mitigation Without Breaking Production

Blocking a vulnerable kernel module buys time before a reboot, but only if it is done the right way and you know what it disables. A step-by-step guide with the decision points spelled out.

intermediate 5 min read

Back to Glossary