Linux kernel TTY job-control use-after-free

This repository is a full exploit environment targeting the Linux kernel (version 4.1.10, ARM architecture). It includes a custom kernel module (exploit/src/module/module.c) that exposes process reference count and address information via /dev/exm, a userland exploit (exploit/src/exploit/exploit.c) that manipulates process reference counts and races process group changes via pseudo-terminals, and a proof-of-concept (exploit/src/exploit/poc.c) that demonstrates the race condition. The Makefiles and rootfs scripts automate building the kernel, root filesystem, and running the exploit in QEMU. The exploit is operational and demonstrates a local privilege escalation scenario by exploiting kernel reference counting bugs, requiring the attacker to have code execution on the target system. Notable fingerprintable endpoints include /dev/exm (the custom device), /dev/ptmx, /sbin/busybox, and /tmp/exploitsocket. The repository is structured for research and demonstration, not for weaponized deployment.