[hellow0rld123]

Maybe not blocking, but the problem is that they rely on system calls for visability for system events and that's the problem because we have mechanisms like io_uring which can allow attackers to so certain actions without making any system calls.

[wmf]

io_uring is a system call. Security tools could analyze it but they don't because they haven't been updated.