This isn't about Linux, but super interesting read about Windows kernel anti-cheat: https://s4dbrd.github.io/posts/how-kernel-anti-cheats-work/