Use when assessing kernel exploitability, reviewing security fixes, or reasoning about bug-to-primitive chains. Teaches primitive taxonomy (UAF, OOB, refcount overflow, info leak), SLUB freelist mechanics, and why a bug's reachability determines its weaponizability.