A kernel vulnerability is a flaw in the core layer of an operating system, where critical functions such as memory management, access control, and driver execution are handled. Because the kernel runs with very high privileges, even a small bug can have outsized impact: code execution, privilege escalation, data tampering, or a system crash.
In real attacks, kernel bugs are prized because they can let an attacker move beyond user-level restrictions and interfere with security tools, logging, or trusted processes. They may be triggered through malicious drivers, specially crafted files, or chained with other exploits after phishing or initial access. Defenders watch for kernel-level abuse with patch management, driver-signing enforcement, application control, endpoint detection, and careful review of unusual crashes or unauthorized driver loads. Fixing kernel vulnerabilities quickly is important because they often affect the trust model of the entire machine.