Kernel Exploitation

This is a comprehensive playbook for exploiting Linux kernel vulnerabilities to escalate privileges, covering the full chain from QEMU setup through clean return to userspace. It walks through UAF, OOB, and race condition exploitation with concrete techniques like commit_creds ROP chains, modprobe_path overwrites, and seq_operations hijacking. The material addresses the key confusion point between userspace and kernel exploitation: SMEP/SMAP restrictions mean you can't just jump to user code anymore, so you need kernel ROP gadgets and proper KPTI trampolines to return cleanly. Best suited for CTF kernel challenges and security research where you're actually debugging with GDB attached to QEMU. The cross-references to heap and ROP fundamentals are helpful since kernel exploitation reuses those concepts in a different context.