It traps the software interrupt which initiates a system call under Linux and the Windows kernel takes over, emulating that system call.