EIP-2026-102894

This exploit leverages a kernel vulnerability in PonyOS <= 3.0 via the tty ioctl() function to patch the setuid system call, allowing privilege escalation to root. It uses arbitrary memory read/write via the winsize ioctl() to achieve this.