Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.
No PoCs from references.
- https://github.com/xairy/linux-kernel-exploitation