Article note: Shown exploit isn't root (or even arbitrary code execution), but they did cobble a little drawing-a-user-controlled-graphic PoC by doing ROP in the userspace... less than 5 hours after release.
Structural engineering is the art of molding materials we don’t wholly understand, into shapes we can’t fully analyze, so as to withstand forces we can’t really assess, in such a way that the community at large has no reason to suspect the extent of our ignorance.