[saagarjha]

It may be the case that either the kernel vulnerability hasn't been analyzed or fixed yet, or that they were not able to capture it. Many of these exploits have multiple stages and grabbing the later ones is difficult.

[callalex]

Is that still true when you control the source code and compiler? Or just for external researchers?

[saagarjha]

It’s not that reverse engineering is the challenge but that the exploit likely gets downloaded from a server that isn’t online anymore.