I stopped reading when it starts explaining what's memory management.
In contrast I found the explanation written by the original author an engaging read: https://dirtypipe.cm4all.com/
In contrast I found the explanation written by the original author an engaging read: https://dirtypipe.cm4all.com/
This part was especially eye-opening:
"... it not only works without write permissions, it also works with immutable files, on read-only btrfs snapshots and on read-only mounts (including CD-ROM mounts)..."