Kernel exploitation challenge with Alloc, Free, Show and Edit. Each option can be used only once. Kernel RIP controlled by exploiting a race condition, using userfaultfd and a timerfd_ctx structure to cause a UAF.