More valuable is actually describing what it does/what it's for. And the article does this: """ eBPF is a functionality of linux kernel that allows lightweight

More valuable is actually describing what it does/what it's for. And the article does this: """ eBPF is a functionality of linux kernel that allows lightweight execution of user code as a response to kernel events. The events could be hardware/software events, tracing events both static (compiled into code) and dynamic (attached in runtime), etc. The code itself is limited in a sense that it is guaranteed to finish (no loops) and is verified before loading into kernel. """