Surprise! h-encore² released for PS Vita firmware 3.71 github.com/TheOfficialFlo…
That was a small weekend project ;-) I found these kernel vulnerabilities more than a year ago but never bothered to exploit them. Yesterday I implemented it in pure ROP using the unpatched bittersmile savedata exploit.