Articles 2022 Crash Override: NetBSD 5.0-9.3 Coredump Kernel Refcount LPE Racing Cats to the Exit: A Boring Linux Kernel Use-After-Free FreeBSD 11.0-13.0 LPE via aio_aqueue Refcount Bug