Kernel malware circumvents this abstraction of privileges by running in kernel mode with direct access to all system services.

• 内核恶意软件以内核模式运行，直接访问系统服务来绕过这种特权抽取。