A split-second race inside the Linux kernel was all it took to turn a routine filesystem copy-on-write operation into a serious privilege escalation.