The Linux kernel has a special kernel extension scheme specifically to keep software like CloudStrike from crashing it ebpf.io/what-is-ebpf/ This is supported by CloudStrike on recent versions of Linux (if you’re running an older version, then yes CloudStrike still has the ability to ruin your day)