I was thinking the same thing, then I realized they don't even need this. They could simply grab the addresses via /proc/kallsysms and poke them into the drive

I was thinking the same thing, then I realized they don't even need this. They could simply grab the addresses via /proc/kallsysms and poke them into the driver using a custom helper to load the kernel module.