I think you got it mixed up. The attack surface of a linux kernel is larger than the attack surface of a VM. Simply speaking, VMs only need to properly take ca

I think you got it mixed up. The attack surface of a linux kernel is larger than the attack surface of a VM. Simply speaking, VMs only need to properly take care of a few privileged CPU opcodes.