FreeBSD 13.0 aio_aqueue Kernel Refcount Local Privilege Escalation

FreeBSD versions 11.0 through 13.0 suffers from a local privilege escalation vulnerability via an aio_aqueue kernel refcount bug. This research post goes into great depth on how the researcher traversed the logic flow and achieved exploitability.

escalation freebsd kernel local local privilege escalation privilege privilege escalation