Tags: pwn
Rating:
map kernel address to DMA physical address and read/write it to get aar/aaw.
brute force to find `current_task` and fill `cred` with 0.
[writeup](https://ptr-yudai.hatenablog.com/entry/2020/05/11/095526#pwn-Secstore-2) (only Secstore#2)
