Sorry, I was being a bit sarcastic and for that I apologise. Picking Linux kernel vulns is a bit like stealing candy from a baby at the moment due to the way th

Sorry, I was being a bit sarcastic and for that I apologise. Picking Linux kernel vulns is a bit like stealing candy from a baby at the moment due to the way the driver model works. There was an awesome talk about it at dc4420[1] a couple of months back and after some digging I pretty much lost the will to live. Linux Kernel exploits tend to 'return' into root, the vulnerabilities allow them to execute in ring 0 (on x86) which gives them full direct access to the hardware. Think trojaned firmware updates and that's the kind of capability we're talking about, all because users can load and interact with drivers that haven't been maintained for years.