0: https://alephsecurity.com/2017/05/23/nexus6-initroot/
Therefore, just the boot parameter injection can be used to get temporary root privileges on a whole bunch of phones.
0: https://alephsecurity.com/2017/05/23/nexus6-initroot/