---
title: Kernel Module
id: kernel-module
date: 2023-07-17
full_link: https://linux-kernel-labs.github.io/refs/heads/master/labs/kernel_modules.html
short_description: >
  Used to describe the .ko object that would be loaded into the kernel as a potentially risky kernel module.
aka:
tags:
- fundamental
---
Used to describe the .ko object that would be loaded into the {{< glossary_tooltip text="kernel" term_id="kernel" >}} as a potentially risky {{< glossary_tooltip text="kernel module" term_id="kernel-module" >}}.

<!--more--> 
This is one option used to pass {{< glossary_tooltip text="kernel" term_id="kernel" >}} events up to userspace for {{< glossary_tooltip text="Falco" term_id="falco" >}} to consume. Sometimes this word is incorrectly used to refer to a {{< glossary_tooltip text="probe" term_id="probes" >}}.

