I'm not convinced. There is about a 0.0% chance you will fork Fil-C, convince Torvalds to accept it into the toolchain and add manual exception handlers to every panic before a Rust kernel reaches working capacity.

Most Linux CVEs are memory corruption bugs. Previously I argued that we should compile C to be memory-safe rather than translating all C to Rust, to avoid introducing logic bugs.

Here, I argue that several parts of the kernel can also be compiled in a memory-safe way.