PoC Exploit Code Publicly Released: New “PinTheft” Linux Flaw Overwrites Page Cache for Instant Root

A technical report on “PinTheft,” a Linux local privilege escalation that abuses a double-free in the RDS zerocopy path together with io_uring fixed buffers to steal FOLL_PIN references, force page-cache reallocation of a SUID binary, overwrite its cached code with a payload, and obtain a root shell; the document provides PoC steps, notes limited default exposure (RDS typically disabled except on some distros), and recommends blocking the rds/rds_tcp modules and rebooting or flushing caches after testing.