@baldur
this article does not do a very good job of explaining their position imho, which is fine - they are just venting
some of the POCs *do* include example PHP code, but it seems to be basically calling unserialize to make it happen faster
if you look at the "anime girl" video, you will note that the attack is against certain WP/Wiki/etc endpoints, not usually root, as these are the easier routes in
the short path to the use-after-free is via file uploads, but this is not the only path, just the easiest one
that said, i have not seen a lot of independent confirmation of the core exploit either, so the idea has some merit, so until i feel like opening a VM and testing it myself the mystery will remain