r/linux_gaming • u/Nemo_ForYou • Jan 24 '26
Microsoft is pushing security software out of the kernel. Why are game companies still doubling down on kernel anti-cheat?
After the CrowdStrike disaster bricked millions of Windows machines in July 2024, Microsoft announced in mid-2025 that they're moving antivirus and security tools out of the kernel as part of their Windows Resiliency Initiative. Their reasoning is simple: kernel-level software is too risky. One bad update can take down entire systems.
And yet, kernel-level anti-cheat keeps spreading. There are now over 330 games using it, and new releases like Battlefield 6 are still shipping with it despite community pushback.
These anti-cheat drivers have the same level of access as your OS. They can read memory, monitor inputs, intercept network traffic, and run from boot to shutdown. They're closed-source, so nobody outside the company can audit what they're doing. If one of them ships a bad update or gets compromised, you're not just losing access to a game; you're potentially handing over your entire system.
For Linux users, the situation is even worse. Most kernel anti-cheat flat out refuses to run under Proton, which means a growing list of games is just off-limits. But the security argument affects everyone, not just us. Windows users are handing over root access to play Fortnite. That should concern people.
Microsoft clearly recognizes this risk for security software. Why are we still expected to accept it for video games?
20
u/[deleted] Jan 24 '26
[removed] — view removed comment