I think it's important to point out "Linux code" includes libc code that lots of Rust wraps over. The very core kernel code will always be inherently unsafe, especially when you get into memory mapping.