Which Linux component is being affected if the malware is altering the Linux memory management functions?

Which Linux component is being affected if the malware is altering the Linux memory management functions?
A. user space
B. kernel space
C. hardware
D. user applications