@baldur

this article does not do a very good job of explaining their position imho, which is fine - they are just venting

some of the POCs *do* include example PHP code, but it seems to be basically calling unserialize to make it happen faster

if you look at the "anime girl" video, you will note that the attack is against certain WP/Wiki/etc endpoints, not usually root, as these are the easier routes in

the short path to the use-after-free is via file uploads, but this is not the only path, just the easiest one

that said, i have not seen a lot of independent confirmation of the core exploit either, so the idea has some merit, so until i feel like opening a VM and testing it myself the mystery will remain