I think that there are two ways to do root, both oriented around the same program. One of them requires crafting correctly (and you may struggle with setting up the environment like I did depending on how your machine is configured) and the other relies on modifying an older vuln (but I was forced to revert the box before it worked).