>"But privesc for any OS running a vulnerable CPU, ..." What is privsec here?