[gcr]

For corruption, sure, but rootkits can mess that up by changing the md5 binary to always give the tainted kernel a known checksum.

If a malicious attacker can modify a kernel, no process running within the kernel can check it for consistency.