Comment by staticassertion

> First of all "security" is undefined.

No it isn't. Security boundaries exist and are explicit. It isn't undefined at all. Going from user X to user Y without permission to do so is an explicit vulnerability.

The kernel has permissions boundaries. They are explicit. It is defined.

> Second, nearly every bug can be be exploited in a malicious way,

No they can't.