Is it Safe for Steam to Access the Windows Kernel? Understanding the Reasons and Implications

The latest update from Steam introduces sought-after monitoring features that promise to enhance user experience. However, this advancement comes with a caveat: Steam is requesting kernel-level access to your Windows operating system. Before granting this permission, it is essential to recognize potential risks.

Understanding Kernel-Level Access

When you encounter the term “kernel, ” your thoughts might drift to popcorn rather than its crucial role in computer systems. In technical language, the kernel is the heart of your operating system, managing resources and facilitating communication between hardware and software. Most applications operate in a limited mode to safeguard the integrity of the system’s core.

The need for kernel-level access is often associated with malware and rootkits, which exploit this access to exert control over system functions. By granting an application such access, you enable it to manipulate essential resources, including memory, CPU, and hardware components.

However, not every application requesting kernel-level access has malicious intent. Many legitimate programs, particularly those offering advanced administrative capabilities and system monitoring functions, require such access for optimal performance. That said, if any of these applications become compromised, your entire operating system may be at risk.

To combat threats, Windows Defender provides a feature known as Core Isolation, designed to protect your PC from various kernel-targeted attacks.

Rationale Behind Steam’s Kernel Access Request

The recent Steam client update introduces a feature that allows users to monitor CPU temperature. Alongside this, it includes enhancements such as new controller support, UI improvements, and upgraded performance tracking.

Importantly, kernel access is necessary solely for the CPU temperature tracking function. This feature is completely optional, though it is enabled by default. Notably, Steam only accesses the Windows kernel when actively monitoring the CPU temperature; when you’re not gaming or when the overlay is disabled, no kernel access occurs.

Users concerned about Steam’s access to the Windows kernel can easily disable it or restrict it to specific games where temperature tracking may prove useful. Steam is generally a trusted platform, yet it’s prudent to assess if this single feature warrants the risk associated with granting kernel access.

How to Disable CPU Temperature Monitoring in Steam

If you do not utilize CPU monitoring features in Steam, rest assured that this new kernel-level setting will not impact you. However, if you have opted into CPU monitoring, the feature is enabled by default.

To disable it, launch the Steam client, click on the Steam menu, and navigate to Settings. Now, select In-Game from the sidebar.

In the Overlay Performance Monitor section, toggle off Enable kernel driver based metrics (CPU temperature). If this option does not appear, make sure to activate Show performance monitor and select a CPU option next to Performance level detail.

This setting change will apply globally, affecting only the CPU temperature tracking that necessitates kernel-level access, without impacting other performance metrics.

Disabling CPU Temperature Tracking for Specific Games

Should you wish to take advantage of the CPU temperature monitoring feature in select games whilekeeping it off in others, you can disable the Steam overlay for individual titles. This adjustment overrides the global overlay settings, ensuring Steam does not access the Windows kernel while playing those games.

To set this up, open the Steam client and navigate to your Library. Right-click on the game for which you want to restrict kernel access and select Properties.

In the General tab, uncheck Enable the Steam Overlay while in-game.

Steam Update Wants Access To Windows Kernel Overlay

Alternatives for Monitoring CPU Temperature

While allowing Steam to manage monitoring can be convenient, some users may prefer not to grant kernel-level access under the latest updates. Fortunately, several reliable performance monitoring tools are available.

Steam utilizes the CPUID SDK for its temperature monitoring, which is also the foundation for trusted applications like CPU-Z and HWMonitor Pro. Thus, if you’re considering third-party options using the CPUID SDK, they may provide similar functionality without significant risk.

It’s important to note, though, that many of these alternatives also require kernel-level access. Your options may include using a third-party tool or checking your system’s BIOS, although accessing the BIOS may not be practical during gaming sessions. If you suspect your CPU temperature is rising too high, these methods can provide insight without necessitating new software installation.

In case you observe a gradual or sharp increase in CPU temperature, it’s crucial to take immediate action to cool your system down.

Source & Images