This is a decent write up.

But I’m annoyed with so many posts claiming novel techniques.

Nothing about this is novel. Exploiting a slab UAF by falling back to page allocator and spraying PTEs is used quiet extensively. And far back on android kernels.