Is it possible for a user to run their own program in kernel mode? How could a user accomplish this? What weakness in the system's protection mechanism would they have to bypass?
I'm thinking that a user program can switch the mode bit from user mode to kernel mode in the interrupt vector and then it can execute any interrupt handlers that it wants. Am I on the right track?