In this case the &quot;user&quot; is the system manufacturer who developed an exploitable application, in this case, Lenovo.<p>Lenovo could sell a Linux PC with a similar application that communicated with a daemon running as root which binary was saved in &#x2F;bin with 0777 permissions.<p>There is nothing special about Windows that makes this vulnerability possible.<p>The end user mistake here was buying Lenovo.