Wow. A universal, unprivileged local kernel stack use-after-free enabling ~97%-reliable privilege escalation and container escape via a constrained write primitive, control-flow hijack, and ROP

* Introduced in Linux 2.6.39 in 2011

* patched in 7.1 (April 2026)