If you&#x27;re interested in reading more about the various kinds of runtime code patching used in Linux, there was a nice paper on it at last year&#x27;s Malware Memory Forensics Workshop:<p>Slides:<p><a href="https:&#x2F;&#x2F;www.acsac.org&#x2F;2014&#x2F;workshops&#x2F;mmf&#x2F;ThomasKittel-Code%20Validation%20for%20Modern%20OS%20Kernels.pdf" rel="nofollow">https:&#x2F;&#x2F;www.acsac.org&#x2F;2014&#x2F;workshops&#x2F;mmf&#x2F;ThomasKittel-Code%2...</a><p>Paper:<p><a href="https:&#x2F;&#x2F;www.acsac.org&#x2F;2014&#x2F;workshops&#x2F;mmf&#x2F;Thomas%20Kittel-%20Code%20Validation%20for%20Modern%20OS%20Kernels-acsacmmf_kittel.pdf" rel="nofollow">https:&#x2F;&#x2F;www.acsac.org&#x2F;2014&#x2F;workshops&#x2F;mmf&#x2F;Thomas%20Kittel-%20...</a>