0ctf2017_kernel_pwn 0ctf2017 Kernel Pwnable - note SMEP + KASLR + security checks on the buffer address for read/write Two bugs: uninitialized heap memory race condition between edit the time of a note and delete a note plus no buffer address check when deleting a note