One of the disadvantages of Linux kernel modules is that they are not safe. Since kernel modules run with full kernel privileges, such as Ring 0 in x86 processors, any bug in a kernel module can compromise or crash the entire system.

Design an approach to make kernel modules safe, meaning that an untrusted or buggy kernel module should not be able to crash or compromise the core kernel. Also, discuss the functionality versus safety tradeoffs in your design, i.e. what is the cost of additional safety.