This gets you code execution in the kernel, at which point sandboxing is irrelevant.