I see, reading about this issue it looks like eBPF can be used in Linux to sandbox kernel applications, preventing such applications from crashing the kernel as a whole.