Kernel level security doesn’t help if you have a heap overflow in the kernel itself.