Check out these threads:
P.S. Yes, I know of more yet-unfixed vulnerabilities, and have written some more exploits. Don't let me anywhere near your Hurd boxes :)
I hope you will publish and get your CVE, good job!
I'd like to know a bit about your workflow in a high level perspective, if I don't bother you
I suppose you virtualized the OS and then did you use static o dynamic analysis?
I'm trying to learn and shift from userland to kernel space exploitation
Yes, my Debian GNU/Hurd installation lives inside qemu/libvirt. No, I didn't use any smart analysis tools: I just browsed the source code and saw things that could go wrong, then wrote exploits for them. It's that simple :)
The social network of the future: No ads, no corporate surveillance, ethical design, and decentralization! Own your data with Mastodon!