User Mode vs. Kernel Mode
In order to keep misbehaving application code from destabilizing the system, Windows uses two processor modes: user mode and kernel mode. User application code runs in user mode; OS code and device drivers run in kernel mode. Kernel mode has a higher hardware privilege level than user mode and provides access to all system memory and all CPU instructions. By running at a higher privilege than application software, Windows can keep a misbehaving application from directly destabilizing the system.
The Intel x86 family of processors actually supports four operating modes (also known as rings). These are numbered 0 through 3, and each is isolated from the others by the hardware—a crash in a lower-priority mode will not destabilize ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access