EIP-2026-102665

This exploit demonstrates a bypass of SELinux restrictions on executable memory mappings by leveraging the `io_setup` syscall combined with `personality(READ_IMPLIES_EXEC)`. It creates a writable and executable memory mapping via `aio_setup_ring()`, which does not recheck LSM security policies.