Kernel exploits target the OS core (Ring 0 — highest privilege), granting complete system control. Most severe vulnerability category. Protections: ASLR, SMEP, SMAP, kernel integrity.
Kernel exploits = full system compromise. Even a non-privileged user can gain root via kernel exploit. Patch OS kernels promptly — kernel CVEs must be treated as emergencies. Container escapes often exploit kernel vulnerabilities.