A blog post claims that Linux kernel exploits often use the pipe_buffer object to build strong primitives. The author says they found less documented pipe_buffer properties while experimenting with kernel-hack-drill. The retained workspace has page metadata and an artifact inventory, but not the article body, so the concrete properties and tests are not visible here.