7 points
If i understand the protection rings correctly, MS could just force all drivers into ring 1 or 2 instead of ring 0, and moreorless fix the issue as well, as the core system would be on ring 0, and everything else on ring 1-3, its just MS as a whole hasen’t supported ring 1 or 2 since early windows days. This feature being implemented from what I understand is what moreorless allowed the Linux edition of crowdstrike to have less of an impact, as it offered a way of installation that allowed the program to “fail” without doing a hard crash of the system.