Linux kernel heap buffer overflow in fs_context.c since version 5.1
There's likely many more of these.As a reminder, Linux has millions of lines of code, and all of them run with supervisor privileges.This is not a good architecture. Generally, you'd try to minimize the attack surface.Multiserver, microkernel systems based on capabilities is where it's at.seL4 is the better microkernel to build such a system on.