Kernel Security Checker: which loaded modules grow your attack surface

Tue, 09 Jun 2026 10:00:00 +0100

Every loaded kernel module is a piece of code running with the highest privileges. The more you have, the larger your attack surface. The catch is that a typical system loads modules nobody deliberately enabled: legacy network protocols, exotic filesystems, drivers for hardware you do not even own.

So far Kernel Security Checker looked at your configuration and kernel version. Now there is a third angle: what is actually loaded right now.

Hardening on vmlinuz

Kernel Security Checker: which loaded modules grow your attack surface