A security researcher exploited a public Linux kernel bug in Google's kernelCTF challenge by manipulating CPU TLB shootdown behavior to maintain a stale memory mapping, then convinced the kernel to recycle the underlying physical page as a page table, ultimately gaining control to retrieve the flag. The exploit leveraged existing public vulnerability details rather than discovering a new bug.