Local privilege escalation via deferred statx use-after-free

Use-after-free in Android kernel io_uring allows local users to escalate privileges by submitting deferred statx requests. The io_uring statx path can defer work without retaining a reference to the process file table, so later execution accesses freed kernel memory. Local low-privileged access is required; no user interaction is needed, and successful exploitation grants elevated privileges.