Dirty Frag: getting root after AF_ALG was blocked and public poc failed (opens in new tab)

a public Dirty Frag PoC failed, so the server looked safe. a cheap DeepSeek-V4-Flash feedback loop found the missed path -> fcrypt mismatch, nscd cache, and root in ~90 minutes.