EIP-2026-104592

This exploit leverages a vulnerability in the `i386_get_ldt` system call in Apple MACOS X xnu kernels (≤ 1228.x) to disclose kernel memory. It uses a negative descriptor count to read arbitrary kernel memory into a user-controlled buffer, then dumps it to a file.