Description
Linux Kernel Exploitation Series 1
From uid=1000 to uid=0—on real Linux kernels.
Stop reading exploit write-ups and start building working privilege-escalation chains.
This hands-on masterclass takes you from Linux heap fundamentals to reliable root exploitation on pinned, intentionally vulnerable kernels running inside your own isolated laboratory.
Every technique is developed from primitive to root shell—not demonstrated through slides or unexplained proof-of-concept code.
What You Will Learn
- Read the heap like a map: understand glibc ptmalloc2, tcache, the kernel SLUB allocator, chunks, bins, freelists, object reuse, heap spraying, and deterministic grooming.
- Understand modern mitigations: enable each protection, observe how it breaks your exploit, and adapt your exploitation strategy.
- Weaponize real vulnerabilities: move from the original bug to useful kernel primitives and complete privilege escalation.
- Turn primitives into root: reclaim freed objects, manipulate pipe buffers, overwrite credentials, and complete data-only exploitation chains.
Real CVE Case Studies
The masterclass examines three major Linux kernel vulnerabilities:
- Dirty Pipe — CVE-2022-0847: pipe-buffer corruption, page-cache modification, and privilege escalation.
- eBPF Verifier — CVE-2021-3490: verifier inconsistencies, range confusion, and kernel read/write primitives.
- nftables Use-After-Free — CVE-2023-32233: object lifetime errors, SLUB reclamation, heap spraying, and controlled replacement objects.
Each case study is developed from vulnerability analysis to a working root shell.
From Primitive to Root
Finding a vulnerability is only the beginning.
You will learn how to convert limited corruption, disclosure, and object-lifetime primitives into complete exploitation chains that remain effective under modern kernel protections.
Your Exploitation Laboratory
You will work with reproducible, pinned Linux kernels configured specifically for exploitation research.
The laboratory allows you to:
- Enable and disable individual mitigations
- Inspect kernel crashes and allocator behaviour
- Trace object allocation, freeing, and reclamation
- Develop and debug exploits safely
- Repeat each chain until exploitation is reliable
Prerequisites
Students should have:
- Basic C programming skills
- Basic x86-64 assembly knowledge
- Familiarity with pointers, structures, and memory management
- Basic Linux kernel and operating-system fundamentals
Previous kernel exploitation experience is not required.
Bring curiosity. Leave with a root shell.
Certification Path
Linux Kernel Exploitation Series 1 is the first of three practical masterclasses.
Complete all three masterclasses to earn your Linux Kernel Exploitation Certification.
Coming Soon
Series 1 launches soon.
Enable notifications to receive the release date, early-access information, and enrolment details. Seats will be limited.
Stop reading about kernel exploits. Start building them.




