The writeup is available here: https://xarkes.com/b/hacklu-2019-babykernel-wu.htmlTL;DR:1. Compute real_cred offset in task_struct2. Get current_task pointer3. Get current_task->real_cred pointer4. Overwrite current_task->real_cred->fsuid with 05. Read /flag
