EIP-2026-100027

The writeup details a memory corruption vulnerability in Samsung RKP (Real-time Kernel Protection) due to lack of bounds checking in the `rkp_set_init_page_ro` function, allowing arbitrary modification of RKP's code or data pages, leading to privilege escalation from EL1 to EL2.