A kernel subsystem is a functional part of the operating system kernel that handles one area of work, such as networking, storage, filesystems, memory management, or device drivers. Each subsystem has its own code paths, interfaces, and security boundaries, even though all of them run inside the same privileged kernel.
In cyber security, subsystem detail matters because a vulnerability is often limited to a specific area of the kernel rather than the whole system. An attacker may try to trigger a flaw in an exposed subsystem through malformed network traffic, crafted files, or a hostile device. Defenders use subsystem information to triage kernel CVEs, decide whether a host is actually affected, and prioritize patching based on enabled features, backports, and workload. Knowing which subsystems are in use helps separate real risk from noise.